<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="1343">
<package pkgid="b57572b3febd1d43dfb55382cbf288f11ec7ef76646c8c899c81a7909c181764" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="7.el9_8"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.7.0-4" date="1753099200">- Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.7.0-5" date="1754395200">- Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9]
- Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry
- Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9]
- Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore.
- Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9]
- Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9]
- Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9]
- Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9]
- Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9]
- Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.7.0-7" date="1758024000">- Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
- Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
- Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
- Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" =&gt; "Databases" menu blank in Cockpit [rhel-9]
- Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
- Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
- Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
- Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-1" date="1767960000">- Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9]
- Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9]
- Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9]
- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9]
- Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used.  [rhel-9]
- Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9]
- Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9]
- Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
- Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9]
- Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9]
- Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9]
- Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9]
- Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9]
- Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9]
- Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9]
- Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9]
- Resolves: RHEL-129580 - Fix paged result search locking [rhel-9]
- Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9]
- Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x
- Resolves: RHEL-140089 - Upgrading IDM  to latest version: 389-ds-base and ipa-server breaks replication  [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-2" date="1768219200">- Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-3" date="1770897600">- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
- Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
- Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
- Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-4" date="1771588800">- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
- Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
- Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
- Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]
- Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-5" date="1772193600">- Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8]
- Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]
- Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-6" date="1772712000">- Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-7" date="1781179200">- Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z]
- Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z]
- Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z]
- Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z]
- Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8]
- Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z]
- Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z]</changelog>
</package>
<package pkgid="b26dc9843ea389c46c3e2fc7ce128cc9671b3ceab7e88012fbcb058aab1e5ac3" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="8.el9_8"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.7.0-5" date="1754395200">- Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9]
- Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry
- Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9]
- Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore.
- Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9]
- Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9]
- Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9]
- Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9]
- Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9]
- Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.7.0-7" date="1758024000">- Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
- Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
- Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
- Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" =&gt; "Databases" menu blank in Cockpit [rhel-9]
- Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
- Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
- Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
- Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-1" date="1767960000">- Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9]
- Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9]
- Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9]
- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9]
- Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used.  [rhel-9]
- Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9]
- Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9]
- Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
- Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9]
- Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9]
- Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9]
- Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9]
- Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9]
- Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9]
- Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9]
- Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9]
- Resolves: RHEL-129580 - Fix paged result search locking [rhel-9]
- Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9]
- Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x
- Resolves: RHEL-140089 - Upgrading IDM  to latest version: 389-ds-base and ipa-server breaks replication  [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-2" date="1768219200">- Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-3" date="1770897600">- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
- Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
- Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
- Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-4" date="1771588800">- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
- Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
- Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
- Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]
- Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-5" date="1772193600">- Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8]
- Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]
- Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-6" date="1772712000">- Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-7" date="1781179200">- Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z]
- Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z]
- Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z]
- Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z]
- Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8]
- Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z]
- Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-8" date="1782388800">- Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z]
- Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z]</changelog>
</package>
<package pkgid="9883acb6b0012f1724c4b12f2a759a155f1e8e6abeb961014edfb0c805d0dc73" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="9.el9_8"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.7.0-7" date="1758024000">- Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
- Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
- Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
- Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" =&gt; "Databases" menu blank in Cockpit [rhel-9]
- Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
- Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
- Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
- Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-1" date="1767960000">- Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9]
- Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9]
- Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9]
- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9]
- Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used.  [rhel-9]
- Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9]
- Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9]
- Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
- Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9]
- Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9]
- Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9]
- Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9]
- Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9]
- Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9]
- Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9]
- Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9]
- Resolves: RHEL-129580 - Fix paged result search locking [rhel-9]
- Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9]
- Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x
- Resolves: RHEL-140089 - Upgrading IDM  to latest version: 389-ds-base and ipa-server breaks replication  [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-2" date="1768219200">- Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-3" date="1770897600">- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
- Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
- Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
- Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-4" date="1771588800">- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
- Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
- Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
- Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]
- Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-5" date="1772193600">- Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8]
- Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]
- Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-6" date="1772712000">- Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-7" date="1781179200">- Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z]
- Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z]
- Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z]
- Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z]
- Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8]
- Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z]
- Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-8" date="1782388800">- Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z]
- Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-9" date="1785153600">- Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-9.8.z]
- Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-9.8.z]
- Resolves: RHEL-210875 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-9.8.z]</changelog>
</package>
<package pkgid="d820c14940c7585f79f74d35c280e7844f219bf90a29a2ae92d42db83f7122d8" name="389-ds-base-debugsource" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="7.el9_8"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.7.0-4" date="1753099200">- Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.7.0-5" date="1754395200">- Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9]
- Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry
- Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9]
- Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore.
- Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9]
- Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9]
- Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9]
- Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9]
- Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9]
- Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.7.0-7" date="1758024000">- Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
- Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
- Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
- Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" =&gt; "Databases" menu blank in Cockpit [rhel-9]
- Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
- Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
- Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
- Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-1" date="1767960000">- Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9]
- Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9]
- Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9]
- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9]
- Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used.  [rhel-9]
- Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9]
- Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9]
- Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
- Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9]
- Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9]
- Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9]
- Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9]
- Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9]
- Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9]
- Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9]
- Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9]
- Resolves: RHEL-129580 - Fix paged result search locking [rhel-9]
- Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9]
- Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x
- Resolves: RHEL-140089 - Upgrading IDM  to latest version: 389-ds-base and ipa-server breaks replication  [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-2" date="1768219200">- Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-3" date="1770897600">- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
- Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
- Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
- Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-4" date="1771588800">- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
- Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
- Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
- Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]
- Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-5" date="1772193600">- Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8]
- Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]
- Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-6" date="1772712000">- Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-7" date="1781179200">- Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z]
- Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z]
- Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z]
- Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z]
- Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8]
- Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z]
- Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z]</changelog>
</package>
<package pkgid="1dc94f8b59ff8c781be89da7634ff4ba4985e043c05aedfc7def7342700c31e7" name="389-ds-base-debugsource" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="8.el9_8"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.7.0-5" date="1754395200">- Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9]
- Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry
- Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9]
- Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore.
- Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9]
- Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9]
- Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9]
- Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9]
- Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9]
- Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.7.0-7" date="1758024000">- Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
- Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
- Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
- Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" =&gt; "Databases" menu blank in Cockpit [rhel-9]
- Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
- Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
- Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
- Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-1" date="1767960000">- Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9]
- Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9]
- Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9]
- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9]
- Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used.  [rhel-9]
- Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9]
- Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9]
- Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
- Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9]
- Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9]
- Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9]
- Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9]
- Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9]
- Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9]
- Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9]
- Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9]
- Resolves: RHEL-129580 - Fix paged result search locking [rhel-9]
- Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9]
- Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x
- Resolves: RHEL-140089 - Upgrading IDM  to latest version: 389-ds-base and ipa-server breaks replication  [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-2" date="1768219200">- Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-3" date="1770897600">- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
- Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
- Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
- Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-4" date="1771588800">- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
- Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
- Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
- Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]
- Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-5" date="1772193600">- Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8]
- Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]
- Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-6" date="1772712000">- Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-7" date="1781179200">- Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z]
- Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z]
- Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z]
- Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z]
- Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8]
- Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z]
- Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-8" date="1782388800">- Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z]
- Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z]</changelog>
</package>
<package pkgid="4be698d2d5214828186375e55ad179e1805e4ccb587a3810f12ac83c824879a0" name="389-ds-base-debugsource" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="9.el9_8"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.7.0-7" date="1758024000">- Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
- Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
- Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
- Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" =&gt; "Databases" menu blank in Cockpit [rhel-9]
- Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
- Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
- Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
- Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-1" date="1767960000">- Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9]
- Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9]
- Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9]
- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9]
- Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used.  [rhel-9]
- Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9]
- Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9]
- Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
- Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9]
- Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9]
- Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9]
- Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9]
- Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9]
- Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9]
- Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9]
- Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9]
- Resolves: RHEL-129580 - Fix paged result search locking [rhel-9]
- Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9]
- Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x
- Resolves: RHEL-140089 - Upgrading IDM  to latest version: 389-ds-base and ipa-server breaks replication  [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-2" date="1768219200">- Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-3" date="1770897600">- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
- Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
- Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
- Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-4" date="1771588800">- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
- Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
- Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
- Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]
- Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-5" date="1772193600">- Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8]
- Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]
- Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-6" date="1772712000">- Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-7" date="1781179200">- Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z]
- Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z]
- Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z]
- Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z]
- Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8]
- Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z]
- Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-8" date="1782388800">- Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z]
- Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-9" date="1785153600">- Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-9.8.z]
- Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-9.8.z]
- Resolves: RHEL-210875 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-9.8.z]</changelog>
</package>
<package pkgid="b3e9782b81a1d170f94b43be56c8a1e60dc677fd5a623563d918b01a0345cb8a" name="389-ds-base-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="7.el9_8"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.7.0-4" date="1753099200">- Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.7.0-5" date="1754395200">- Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9]
- Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry
- Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9]
- Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore.
- Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9]
- Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9]
- Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9]
- Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9]
- Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9]
- Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.7.0-7" date="1758024000">- Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
- Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
- Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
- Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" =&gt; "Databases" menu blank in Cockpit [rhel-9]
- Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
- Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
- Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
- Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-1" date="1767960000">- Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9]
- Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9]
- Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9]
- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9]
- Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used.  [rhel-9]
- Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9]
- Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9]
- Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
- Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9]
- Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9]
- Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9]
- Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9]
- Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9]
- Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9]
- Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9]
- Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9]
- Resolves: RHEL-129580 - Fix paged result search locking [rhel-9]
- Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9]
- Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x
- Resolves: RHEL-140089 - Upgrading IDM  to latest version: 389-ds-base and ipa-server breaks replication  [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-2" date="1768219200">- Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-3" date="1770897600">- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
- Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
- Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
- Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-4" date="1771588800">- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
- Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
- Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
- Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]
- Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-5" date="1772193600">- Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8]
- Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]
- Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-6" date="1772712000">- Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-7" date="1781179200">- Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z]
- Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z]
- Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z]
- Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z]
- Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8]
- Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z]
- Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z]</changelog>
</package>
<package pkgid="9c3bb66d57b9a8f605bb2fcc06d52d8a3f52e468a05eb87ecb953a38313fe48a" name="389-ds-base-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="8.el9_8"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.7.0-5" date="1754395200">- Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9]
- Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry
- Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9]
- Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore.
- Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9]
- Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9]
- Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9]
- Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9]
- Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9]
- Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.7.0-7" date="1758024000">- Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
- Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
- Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
- Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" =&gt; "Databases" menu blank in Cockpit [rhel-9]
- Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
- Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
- Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
- Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-1" date="1767960000">- Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9]
- Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9]
- Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9]
- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9]
- Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used.  [rhel-9]
- Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9]
- Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9]
- Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
- Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9]
- Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9]
- Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9]
- Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9]
- Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9]
- Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9]
- Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9]
- Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9]
- Resolves: RHEL-129580 - Fix paged result search locking [rhel-9]
- Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9]
- Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x
- Resolves: RHEL-140089 - Upgrading IDM  to latest version: 389-ds-base and ipa-server breaks replication  [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-2" date="1768219200">- Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-3" date="1770897600">- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
- Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
- Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
- Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-4" date="1771588800">- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
- Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
- Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
- Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]
- Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-5" date="1772193600">- Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8]
- Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]
- Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-6" date="1772712000">- Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-7" date="1781179200">- Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z]
- Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z]
- Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z]
- Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z]
- Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8]
- Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z]
- Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-8" date="1782388800">- Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z]
- Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z]</changelog>
</package>
<package pkgid="9e9fe3839b71814c8aab43cce21d8e16f40130ff3fd8531f94ac606ce9e61242" name="389-ds-base-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="9.el9_8"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.7.0-7" date="1758024000">- Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
- Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
- Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
- Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" =&gt; "Databases" menu blank in Cockpit [rhel-9]
- Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
- Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
- Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
- Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-1" date="1767960000">- Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9]
- Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9]
- Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9]
- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9]
- Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used.  [rhel-9]
- Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9]
- Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9]
- Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
- Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9]
- Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9]
- Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9]
- Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9]
- Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9]
- Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9]
- Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9]
- Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9]
- Resolves: RHEL-129580 - Fix paged result search locking [rhel-9]
- Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9]
- Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x
- Resolves: RHEL-140089 - Upgrading IDM  to latest version: 389-ds-base and ipa-server breaks replication  [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-2" date="1768219200">- Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-3" date="1770897600">- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
- Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
- Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
- Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-4" date="1771588800">- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
- Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
- Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
- Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]
- Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-5" date="1772193600">- Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8]
- Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]
- Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-6" date="1772712000">- Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-7" date="1781179200">- Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z]
- Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z]
- Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z]
- Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z]
- Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8]
- Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z]
- Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-8" date="1782388800">- Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z]
- Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-9" date="1785153600">- Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-9.8.z]
- Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-9.8.z]
- Resolves: RHEL-210875 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-9.8.z]</changelog>
</package>
<package pkgid="ef30ec579b92dbb414df4d924bc45f11bab64d36b86dd35763f826cf287c222f" name="389-ds-base-snmp-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="7.el9_8"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.7.0-4" date="1753099200">- Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.7.0-5" date="1754395200">- Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9]
- Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry
- Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9]
- Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore.
- Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9]
- Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9]
- Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9]
- Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9]
- Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9]
- Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.7.0-7" date="1758024000">- Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
- Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
- Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
- Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" =&gt; "Databases" menu blank in Cockpit [rhel-9]
- Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
- Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
- Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
- Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-1" date="1767960000">- Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9]
- Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9]
- Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9]
- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9]
- Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used.  [rhel-9]
- Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9]
- Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9]
- Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
- Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9]
- Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9]
- Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9]
- Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9]
- Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9]
- Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9]
- Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9]
- Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9]
- Resolves: RHEL-129580 - Fix paged result search locking [rhel-9]
- Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9]
- Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x
- Resolves: RHEL-140089 - Upgrading IDM  to latest version: 389-ds-base and ipa-server breaks replication  [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-2" date="1768219200">- Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-3" date="1770897600">- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
- Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
- Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
- Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-4" date="1771588800">- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
- Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
- Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
- Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]
- Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-5" date="1772193600">- Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8]
- Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]
- Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-6" date="1772712000">- Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-7" date="1781179200">- Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z]
- Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z]
- Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z]
- Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z]
- Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8]
- Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z]
- Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z]</changelog>
</package>
<package pkgid="c21b2e46e18a1579f0daa82079c02a480254f20263ee2475151727fd09da384a" name="389-ds-base-snmp-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="8.el9_8"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.7.0-5" date="1754395200">- Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9]
- Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry
- Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9]
- Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore.
- Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9]
- Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9]
- Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9]
- Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9]
- Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9]
- Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.7.0-7" date="1758024000">- Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
- Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
- Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
- Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" =&gt; "Databases" menu blank in Cockpit [rhel-9]
- Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
- Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
- Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
- Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-1" date="1767960000">- Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9]
- Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9]
- Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9]
- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9]
- Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used.  [rhel-9]
- Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9]
- Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9]
- Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
- Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9]
- Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9]
- Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9]
- Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9]
- Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9]
- Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9]
- Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9]
- Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9]
- Resolves: RHEL-129580 - Fix paged result search locking [rhel-9]
- Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9]
- Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x
- Resolves: RHEL-140089 - Upgrading IDM  to latest version: 389-ds-base and ipa-server breaks replication  [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-2" date="1768219200">- Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-3" date="1770897600">- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
- Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
- Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
- Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-4" date="1771588800">- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
- Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
- Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
- Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]
- Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-5" date="1772193600">- Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8]
- Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]
- Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-6" date="1772712000">- Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-7" date="1781179200">- Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z]
- Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z]
- Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z]
- Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z]
- Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8]
- Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z]
- Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-8" date="1782388800">- Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z]
- Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z]</changelog>
</package>
<package pkgid="86d700083327d4aeb595c0b90bc15657eea158a453cee52c60000772d46b6b27" name="389-ds-base-snmp-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="9.el9_8"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.7.0-7" date="1758024000">- Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
- Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
- Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
- Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" =&gt; "Databases" menu blank in Cockpit [rhel-9]
- Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
- Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
- Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
- Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-1" date="1767960000">- Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9]
- Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9]
- Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9]
- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9]
- Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used.  [rhel-9]
- Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9]
- Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9]
- Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
- Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9]
- Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9]
- Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9]
- Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9]
- Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9]
- Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9]
- Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9]
- Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9]
- Resolves: RHEL-129580 - Fix paged result search locking [rhel-9]
- Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9]
- Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x
- Resolves: RHEL-140089 - Upgrading IDM  to latest version: 389-ds-base and ipa-server breaks replication  [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-2" date="1768219200">- Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-3" date="1770897600">- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
- Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
- Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
- Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-4" date="1771588800">- Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
- Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
- Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
- Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
- Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
- Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]
- Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-5" date="1772193600">- Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8]
- Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]
- Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-6" date="1772712000">- Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-7" date="1781179200">- Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z]
- Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z]
- Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z]
- Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z]
- Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8]
- Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z]
- Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-8" date="1782388800">- Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z]
- Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 2.8.0-9" date="1785153600">- Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-9.8.z]
- Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-9.8.z]
- Resolves: RHEL-210875 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-9.8.z]</changelog>
</package>
<package pkgid="0b2853ba35d67063409d180bf07f862184ee4fad06f627acc9894753d9c6b76e" name="LibRaw-debuginfo" arch="i686">
  <version epoch="0" ver="0.21.1" rel="2.el9_8.1"/>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.21.1-2" date="1777377600">- Fix CVE-2026-21413 and CVE-2026-24450
Resolves: RHEL-165374, RHEL-165461</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.21.1-2.1" date="1785412800">- Fix CVE-2026-51235
Resolves: RHEL-219221</changelog>
</package>
<package pkgid="b4502cd727446a4371bb0e84752c442038acea768196927890847f2fb6b48667" name="LibRaw-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.21.1" rel="2.el9_8.1"/>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.21.1-2" date="1777377600">- Fix CVE-2026-21413 and CVE-2026-24450
Resolves: RHEL-165374, RHEL-165461</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.21.1-2.1" date="1785412800">- Fix CVE-2026-51235
Resolves: RHEL-219221</changelog>
</package>
<package pkgid="eb25d6e6f909b2fc7624fe8054f1f34c254e74ee9c75925d77db6b49682354a7" name="LibRaw-debugsource" arch="i686">
  <version epoch="0" ver="0.21.1" rel="2.el9_8.1"/>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.21.1-2" date="1777377600">- Fix CVE-2026-21413 and CVE-2026-24450
Resolves: RHEL-165374, RHEL-165461</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.21.1-2.1" date="1785412800">- Fix CVE-2026-51235
Resolves: RHEL-219221</changelog>
</package>
<package pkgid="9bb8a48d78a27747798246f50ffc195e34ed559512b70a78fb2ec2bfe56b2dc0" name="LibRaw-debugsource" arch="x86_64">
  <version epoch="0" ver="0.21.1" rel="2.el9_8.1"/>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.21.1-2" date="1777377600">- Fix CVE-2026-21413 and CVE-2026-24450
Resolves: RHEL-165374, RHEL-165461</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.21.1-2.1" date="1785412800">- Fix CVE-2026-51235
Resolves: RHEL-219221</changelog>
</package>
<package pkgid="0bba6dbd0db0d737207e3ac2d715c4e9f24e3540e085ff5649c7aadea5661505" name="NetworkManager-adsl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="f0d6a233a480eedc63fc8ab7d953ea00ed3432b1e9479048712c5d900cd4e9a3" name="NetworkManager-adsl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="48647316c5fc9409256e668eea7eb2a24be6b5de3fd5d6045b2de22181dc1ec9" name="NetworkManager-bluetooth-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="fa855ce0cee0c22af85a05e58577064273758d6d27accc75a2f5e94f85bff545" name="NetworkManager-bluetooth-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="d3e6c009da437c676332439743cd666698c0ec5a44811fae6860e3cb19358ddc" name="NetworkManager-cloud-setup-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="556951f7dc2bf0617d93d95450cc2b4769378be137dc57cabf360b3bdd1b7bbc" name="NetworkManager-cloud-setup-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="b77e229205627c7287595449d7dd74c6926c9968a6a72c4972a5d1955381efd2" name="NetworkManager-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="99af8e0f04e933dd340fb2a6db77fb37a168d5239aac0781780cd154cb9bd507" name="NetworkManager-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="367c9137d965abad5342ec5aecae133bd659e6720f35266d12a6d4d1dccfdc3c" name="NetworkManager-debugsource" arch="i686">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="e0a1ea22fdb28970d0a45fdc5ff0650c467fc6bcab80ff92ef17ff04832c7deb" name="NetworkManager-debugsource" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="5dda8f4011f1f086b82f7c3ed2ed36d2f8b9c7e969624c35cbe72ff4c9ebc8fc" name="NetworkManager-debugsource" arch="i686">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="d8c1abeac6c33961b566dad004faffdf64a31dac74edaf62f972dc9e8adfa6b0" name="NetworkManager-debugsource" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="4cf3d2655117216eafe909a1442b94a3ff5d63db2754ae13da4818ba145fbb2a" name="NetworkManager-libnm-debuginfo" arch="i686">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="a2718623cefe9234c8f0b1ddfff99ce7b4cd07fd063d53b11652e29ae80c2547" name="NetworkManager-libnm-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="4e0fa520fe40a5e87e10e445b34f94682d5363d036289ed00d36878dc383513e" name="NetworkManager-libnm-debuginfo" arch="i686">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="785b39a9a9d74807e90aea521d089c269171e037344ec251d6d0dc969a9b8ee4" name="NetworkManager-libnm-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="38875417d02296e60a4efeb9dfaa70e3b31979deb05f3e21efb696cdf49fb84d" name="NetworkManager-ovs-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="8d1b5d4bbbf50510f35b0d9e31fa120afccf5e5dd23da85df49cb93dd8663d57" name="NetworkManager-ovs-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="ea9cad1874eed41d649c379b61ca6b30a6b5c72bf0bbaaf84da7b0e7250976e2" name="NetworkManager-ppp-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="9dd2f4350dd96ae24d24105603aedb24f58a9ebfc323c28bb5c3cd62e0fd507f" name="NetworkManager-ppp-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="f9c24bce9582a91b39cd532105c83db59359d80541d765cc081c0de1bd7baf94" name="NetworkManager-team-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="ff7a209084a53ca68dca05d2a7da9bf44187e1d394560690ace9c218cd4124a5" name="NetworkManager-team-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="befb650e554ee788e33a5bf5b429b926c8214e837532a33ee354e69964c60b54" name="NetworkManager-tui-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="043a5b20fb0720ee4b2b059afa9af00dc379a03490ddbfd72a690875aabe5879" name="NetworkManager-tui-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="c904fbb81c1b55f01a19d3d382d7874537c79065005582847ce3d344969eadff" name="NetworkManager-wifi-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="9445d302a31740e90e61921b49e8b736a83bf5c7ca7ffdb974e552251f9cc6eb" name="NetworkManager-wifi-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="f72d344f5201882aa2706cf8a4f0c0bc44e29dcdfc12a731b798fea51c8082c1" name="NetworkManager-wwan-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="3.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83061)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-85770)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

Resolves: RHEL-83061
Resolves: RHEL-59083
Resolves: RHEL-87596
Resolves: RHEL-85770
Resolves: RHEL-85764
Resolves: RHEL-85778
Resolves: RHEL-87168</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
</package>
<package pkgid="833669dddb14f84c6dd31b6a349aac4890e7d5b3e5632c807fd2c88f4e21cad9" name="NetworkManager-wwan-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.54.3" rel="4.el9_8"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-93108)
- Crash on _l3cfg_notify_cb (RHEL-92314)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
- Fix a race condition in ovs tun interface (RHEL-98551)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102772)
- Allow setting IP method to disabled in port connection (RHEL-102768)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102743)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt;- 1:1.54.1-1" date="1758196800">- Update to 1.54.1
- Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
- Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
- Global DNS config without domains silently ignored from D-Bus (RHEL-115973)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.2-1" date="1763467200">- Update to 1.54.2
- Support setting protocol version of HSR/PRP (RHEL-122172)
- Support interlink for HSR/PRP (RHEL-122175)
- Improve logging of networking off (RHEL-122173 )
- Don't delete unrelated OVS ports (RHEL-121104)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.54.3-1" date="1765800000">- Update to 1.54.3
- Fix CVE-2025-9615 (RHEL-111783)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.54.3-2" date="1767787200">- Add hard dependency on iputils (RHEL-134751)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-3" date="1778155200">- Fix 802.1x auth for bridge interface (RHEL-151941)</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.54.3-4" date="1781006400">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)</changelog>
</package>
<package pkgid="8e944799986e4d8998f5b04b007aaa1aa9d0645f266505eac8ae62716ef47b92" name="PackageKit-command-not-found-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="2.el9_7"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.2.6-2" date="1777291200">- Backport fix for CVE-2026-41651.
- Resolves: #RHEL-170502</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 1.2.6-2" date="1779364800">- Change PackageKit URLs to Navix pages</changelog>
</package>
<package pkgid="481d90b899abe4fe62d0ce123edec41fd9d9f598c494bcc89a0500a40e08edcf" name="PackageKit-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="2.el9_7"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.2.6-2" date="1777291200">- Backport fix for CVE-2026-41651.
- Resolves: #RHEL-170502</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 1.2.6-2" date="1779364800">- Change PackageKit URLs to Navix pages</changelog>
</package>
<package pkgid="88a642e122ded0a44f0854f6d2f14585b683a621a490992bd3c73cbec10984c2" name="PackageKit-debugsource" arch="i686">
  <version epoch="0" ver="1.2.6" rel="2.el9_7"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.2.6-2" date="1777291200">- Backport fix for CVE-2026-41651.
- Resolves: #RHEL-170502</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 1.2.6-2" date="1779364800">- Change PackageKit URLs to Navix pages</changelog>
</package>
<package pkgid="6f3ac4f9589000c306eeb145fe50543d2bd0c359cb9de0c47a86e5369444f003" name="PackageKit-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="2.el9_7"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.2.6-2" date="1777291200">- Backport fix for CVE-2026-41651.
- Resolves: #RHEL-170502</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 1.2.6-2" date="1779364800">- Change PackageKit URLs to Navix pages</changelog>
</package>
<package pkgid="bf2cbe1901e50e1fab2a393f46de518f3699f51ba946d476dff0c9acf3201f30" name="PackageKit-glib-debuginfo" arch="i686">
  <version epoch="0" ver="1.2.6" rel="2.el9_7"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.2.6-2" date="1777291200">- Backport fix for CVE-2026-41651.
- Resolves: #RHEL-170502</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 1.2.6-2" date="1779364800">- Change PackageKit URLs to Navix pages</changelog>
</package>
<package pkgid="89649838a3027b412485f82375a5057cf5fe6f2141cd18394320feac653dd120" name="PackageKit-glib-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="2.el9_7"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.2.6-2" date="1777291200">- Backport fix for CVE-2026-41651.
- Resolves: #RHEL-170502</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 1.2.6-2" date="1779364800">- Change PackageKit URLs to Navix pages</changelog>
</package>
<package pkgid="2b03ef1d6efabb33a585d0272b046e20a9f5473a5af4c38cf6f6ebe20d5d0e6e" name="PackageKit-gstreamer-plugin-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="2.el9_7"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.2.6-2" date="1777291200">- Backport fix for CVE-2026-41651.
- Resolves: #RHEL-170502</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 1.2.6-2" date="1779364800">- Change PackageKit URLs to Navix pages</changelog>
</package>
<package pkgid="17ea4724a4365e4776e3dee0ac4dfbba1da5bbf3244d538f228b79ac365adbaa" name="PackageKit-gtk3-module-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="2.el9_7"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.2.6-2" date="1777291200">- Backport fix for CVE-2026-41651.
- Resolves: #RHEL-170502</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 1.2.6-2" date="1779364800">- Change PackageKit URLs to Navix pages</changelog>
</package>
<package pkgid="10c644a28d26d59b80d9ece9002a770ef5d66532ea0736e7cecc186fa4cc71ff" name="aardvark-dns-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.17.1" rel="1.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-1" date="1731499200">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.1
- Related: RHEL-60277</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.14.0-1" date="1739188800">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.14.0
- Related: RHEL-60277</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 2:1.14.0-2" date="1740657600">- rebuilt to try TMT tests in osci
- Resolves: RHEL-80816</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 2:1.14.0-3" date="1741953600">- fix dep issues in tests subpackage
- Resolves: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.15.0-1" date="1747224000">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.15.0
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.16.0-1" date="1755259200">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.16.0
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.17.0-1" date="1763121600">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.0
- Resolves: RHEL-85839</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.17.1-1" date="1777982400">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.1
- Resolves: RHEL-170152</changelog>
</package>
<package pkgid="a1322432d03941adeba8ad5589d0d80fc96f836373a456c111c1739851a8216d" name="aardvark-dns-debugsource" arch="x86_64">
  <version epoch="2" ver="1.17.1" rel="1.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-1" date="1731499200">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.1
- Related: RHEL-60277</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.14.0-1" date="1739188800">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.14.0
- Related: RHEL-60277</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 2:1.14.0-2" date="1740657600">- rebuilt to try TMT tests in osci
- Resolves: RHEL-80816</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 2:1.14.0-3" date="1741953600">- fix dep issues in tests subpackage
- Resolves: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.15.0-1" date="1747224000">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.15.0
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.16.0-1" date="1755259200">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.16.0
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.17.0-1" date="1763121600">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.0
- Resolves: RHEL-85839</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.17.1-1" date="1777982400">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.1
- Resolves: RHEL-170152</changelog>
</package>
<package pkgid="fd121f3016a66319e880e85aef97a5ceaa00a3d8d22f5c917387df6a555874d7" name="acl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="1.el9_8"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.4.0-1" date="1782388800">- rebase to 2.4.0 to fix the following CVEs:
  - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions (RHEL-186111)
  - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl (RHEL-186216)</changelog>
</package>
<package pkgid="f9ba340412dd45f0ad6d9d75207596b7ebddecd40ce6980b04ffce7d60fcf8a5" name="acl-debugsource" arch="i686">
  <version epoch="0" ver="2.4.0" rel="1.el9_8"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.4.0-1" date="1782388800">- rebase to 2.4.0 to fix the following CVEs:
  - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions (RHEL-186111)
  - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl (RHEL-186216)</changelog>
</package>
<package pkgid="9825865e7600ffd8cfb5058d123b09bbfb658329ab8bb5a613c84d6d0da4ee94" name="acl-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="1.el9_8"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.4.0-1" date="1782388800">- rebase to 2.4.0 to fix the following CVEs:
  - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions (RHEL-186111)
  - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl (RHEL-186216)</changelog>
</package>
<package pkgid="9451dd41de1175e4f0b3133f304c0f640471fee195ac155486e275d64bb8cf3f" name="adcli-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.3.1" rel="3.el9"/>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.3.1-1" date="1765972800">- Rebase to latest upstream version
  Resolves: RHEL-134944
  Resolves: RHEL-134945
  Resolves: RHEL-134946
  Resolves: RHEL-134947
  Resolves: RHEL-134948
  Resolves: RHEL-134950
  Resolves: RHEL-134951
  Resolves: RHEL-134952</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.3.1-2" date="1766491200">- Add explicit selinux dependencies to avoid policycoreutils-python-utils dependency
  Resolves: RHEL-134944</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.3.1-3" date="1766491201">- Fix issue with restoring SELinux file label
  Resolves: RHEL-134944</changelog>
</package>
<package pkgid="ebb7dae184cd294766a268530dba9d30ed0fe4558197f9b8c28608c90c8689f9" name="adcli-debugsource" arch="x86_64">
  <version epoch="0" ver="0.9.3.1" rel="3.el9"/>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.3.1-1" date="1765972800">- Rebase to latest upstream version
  Resolves: RHEL-134944
  Resolves: RHEL-134945
  Resolves: RHEL-134946
  Resolves: RHEL-134947
  Resolves: RHEL-134948
  Resolves: RHEL-134950
  Resolves: RHEL-134951
  Resolves: RHEL-134952</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.3.1-2" date="1766491200">- Add explicit selinux dependencies to avoid policycoreutils-python-utils dependency
  Resolves: RHEL-134944</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.3.1-3" date="1766491201">- Fix issue with restoring SELinux file label
  Resolves: RHEL-134944</changelog>
</package>
<package pkgid="07a81fe347e9f313d7d8eff73188d56d6745cfa03a449b5e2cfe578aa1135bfe" name="aide-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.19.2" rel="5.el9_8.1"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.16-103" date="1736942400">RHEL 9.6.0 ERRATUM
- /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation
Resolves: RHEL-4331</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.16-105" date="1755691200">RHEL 9.7 ERRATUM
- CVE-2025-54389 aide: improper output neutralization enables bypassing
Resolves: RHEL-109912</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.19.2-1" date="1758024000">RHEL 9.8.0 ERRATUM
- rebase to 0.19.2
Resolves: RHEL-110573
- Switch to libnettle for hashing
- prevent aide from crashing if database is a HTTPS URL
Resolves: RHEL-76014
- prevent aide from exiting if a file is truncated during check
Resolves: RHEL-1569</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.19.2-2" date="1758801600">RHEL 9.8.0 ERRATUM
- Modernize config file
Resolves: RHEL-83776</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.19.2-3" date="1759233600">- Do not monitor link count in /var/log/journal
Resolves: RHEL-83776</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.19.2-4" date="1760011200">- /boot/grub2/grubenv is excluded from check due to boot_success implementation
Resolves: RHEL-83776</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.19.2-5" date="1760529600">- Adjust default config to avoid false positives in /etc
Resolves: RHEL-83776</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.19.2-5.1" date="1779796800">- Re-add syslog_format config option dropped during rebase to 0.19.2
Resolves: RHEL-178539
- Add aide-migrate-config to automate config migration from pre-0.19 syntax</changelog>
</package>
<package pkgid="8589c96ae6bfaa5f2be6410110ebc81a7634e6a8e82daeac31c960a8a3daee08" name="aide-debugsource" arch="x86_64">
  <version epoch="0" ver="0.19.2" rel="5.el9_8.1"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.16-103" date="1736942400">RHEL 9.6.0 ERRATUM
- /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation
Resolves: RHEL-4331</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.16-105" date="1755691200">RHEL 9.7 ERRATUM
- CVE-2025-54389 aide: improper output neutralization enables bypassing
Resolves: RHEL-109912</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.19.2-1" date="1758024000">RHEL 9.8.0 ERRATUM
- rebase to 0.19.2
Resolves: RHEL-110573
- Switch to libnettle for hashing
- prevent aide from crashing if database is a HTTPS URL
Resolves: RHEL-76014
- prevent aide from exiting if a file is truncated during check
Resolves: RHEL-1569</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.19.2-2" date="1758801600">RHEL 9.8.0 ERRATUM
- Modernize config file
Resolves: RHEL-83776</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.19.2-3" date="1759233600">- Do not monitor link count in /var/log/journal
Resolves: RHEL-83776</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.19.2-4" date="1760011200">- /boot/grub2/grubenv is excluded from check due to boot_success implementation
Resolves: RHEL-83776</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.19.2-5" date="1760529600">- Adjust default config to avoid false positives in /etc
Resolves: RHEL-83776</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.19.2-5.1" date="1779796800">- Re-add syslog_format config option dropped during rebase to 0.19.2
Resolves: RHEL-178539
- Add aide-migrate-config to automate config migration from pre-0.19 syntax</changelog>
</package>
<package pkgid="b971d8ad50b6aff51aaf67e46ec5c68ab11b72dc4814f53b7fd35a969377cbf3" name="audispd-plugins-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.5" rel="8.el9"/>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-1" date="1720526400">- New upstream maintenance release, 3.1.4
- Prevent scriplets from failing
- When upgrading, restart the daemon if it's running
- If uninstalling, stop the daemon
- auditctl: use pidfd_send_signal for signaling auditd
  Resolves: RHEL-45865
- Minor doc update
  Resolves: RHEL-5186
- augenrules: do not exit with failure if in immutable mode
  Resolves: RHEL-40110
- auditd.service: Disable ProtectControlGroups
  Resolves: RHEL-5197
- auditctl: correct output when displaying rules with exe/path/dir
  Resolves: RHEL-40243</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-2" date="1736337600">- Disable ProtectKernelModules=true in service file
  Resolves: RHEL-59570
- af_unix plugin: restore original behavior in binary mode
  Resolves: RHEL-59585
- Support image mode
  Resolves: RHEL-69033
- Resolve ordering cycle when using remote logging
  Resolves: RHEL-11252
- Filter syscalls to ensure architecture-specific availability
  Resolves: RHEL-70455</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-3" date="1738584000">- Don't do "live" operations during rpm-ostree composes
  Resolves: RHEL-69033</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-4" date="1739275200">- auditctl: correct buffer in filter_supported_syscalls to avoid overflow
  Resolves: RHEL-59585</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-5" date="1743163200">- ausearch: correct search for DAEMON related events
- allow hex digits when interpreting tty data
  Resolves: RHEL-82279
- Fix TTY hostname in log messages
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-6" date="1743595200">- Update end of event detection mechanism
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-7" date="1744372800">- ausearch-checkpoint race condition fix
  Resolves: RHEL-86897</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-8" date="1767700800">- Fix POSTIN scriplet to not fail during upgrade
  Resolves: RHEL-138696</changelog>
</package>
<package pkgid="07520612452164c16a694abb34b214e550e105e04c6e9715c8e8c4505571ee9d" name="audispd-plugins-zos-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.5" rel="8.el9"/>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-1" date="1720526400">- New upstream maintenance release, 3.1.4
- Prevent scriplets from failing
- When upgrading, restart the daemon if it's running
- If uninstalling, stop the daemon
- auditctl: use pidfd_send_signal for signaling auditd
  Resolves: RHEL-45865
- Minor doc update
  Resolves: RHEL-5186
- augenrules: do not exit with failure if in immutable mode
  Resolves: RHEL-40110
- auditd.service: Disable ProtectControlGroups
  Resolves: RHEL-5197
- auditctl: correct output when displaying rules with exe/path/dir
  Resolves: RHEL-40243</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-2" date="1736337600">- Disable ProtectKernelModules=true in service file
  Resolves: RHEL-59570
- af_unix plugin: restore original behavior in binary mode
  Resolves: RHEL-59585
- Support image mode
  Resolves: RHEL-69033
- Resolve ordering cycle when using remote logging
  Resolves: RHEL-11252
- Filter syscalls to ensure architecture-specific availability
  Resolves: RHEL-70455</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-3" date="1738584000">- Don't do "live" operations during rpm-ostree composes
  Resolves: RHEL-69033</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-4" date="1739275200">- auditctl: correct buffer in filter_supported_syscalls to avoid overflow
  Resolves: RHEL-59585</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-5" date="1743163200">- ausearch: correct search for DAEMON related events
- allow hex digits when interpreting tty data
  Resolves: RHEL-82279
- Fix TTY hostname in log messages
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-6" date="1743595200">- Update end of event detection mechanism
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-7" date="1744372800">- ausearch-checkpoint race condition fix
  Resolves: RHEL-86897</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-8" date="1767700800">- Fix POSTIN scriplet to not fail during upgrade
  Resolves: RHEL-138696</changelog>
</package>
<package pkgid="847fc32a9626d87a1da0ce6960e6748386abaed0dd71e0044925ced7eaf5bb00" name="audit-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.5" rel="8.el9"/>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-1" date="1720526400">- New upstream maintenance release, 3.1.4
- Prevent scriplets from failing
- When upgrading, restart the daemon if it's running
- If uninstalling, stop the daemon
- auditctl: use pidfd_send_signal for signaling auditd
  Resolves: RHEL-45865
- Minor doc update
  Resolves: RHEL-5186
- augenrules: do not exit with failure if in immutable mode
  Resolves: RHEL-40110
- auditd.service: Disable ProtectControlGroups
  Resolves: RHEL-5197
- auditctl: correct output when displaying rules with exe/path/dir
  Resolves: RHEL-40243</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-2" date="1736337600">- Disable ProtectKernelModules=true in service file
  Resolves: RHEL-59570
- af_unix plugin: restore original behavior in binary mode
  Resolves: RHEL-59585
- Support image mode
  Resolves: RHEL-69033
- Resolve ordering cycle when using remote logging
  Resolves: RHEL-11252
- Filter syscalls to ensure architecture-specific availability
  Resolves: RHEL-70455</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-3" date="1738584000">- Don't do "live" operations during rpm-ostree composes
  Resolves: RHEL-69033</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-4" date="1739275200">- auditctl: correct buffer in filter_supported_syscalls to avoid overflow
  Resolves: RHEL-59585</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-5" date="1743163200">- ausearch: correct search for DAEMON related events
- allow hex digits when interpreting tty data
  Resolves: RHEL-82279
- Fix TTY hostname in log messages
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-6" date="1743595200">- Update end of event detection mechanism
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-7" date="1744372800">- ausearch-checkpoint race condition fix
  Resolves: RHEL-86897</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-8" date="1767700800">- Fix POSTIN scriplet to not fail during upgrade
  Resolves: RHEL-138696</changelog>
</package>
<package pkgid="e037e107c9b19a19216482ceb8da1eecadab7892c4e2c9a45b98c964c8f806f8" name="audit-libs-debuginfo" arch="i686">
  <version epoch="0" ver="3.1.5" rel="8.el9"/>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-1" date="1720526400">- New upstream maintenance release, 3.1.4
- Prevent scriplets from failing
- When upgrading, restart the daemon if it's running
- If uninstalling, stop the daemon
- auditctl: use pidfd_send_signal for signaling auditd
  Resolves: RHEL-45865
- Minor doc update
  Resolves: RHEL-5186
- augenrules: do not exit with failure if in immutable mode
  Resolves: RHEL-40110
- auditd.service: Disable ProtectControlGroups
  Resolves: RHEL-5197
- auditctl: correct output when displaying rules with exe/path/dir
  Resolves: RHEL-40243</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-2" date="1736337600">- Disable ProtectKernelModules=true in service file
  Resolves: RHEL-59570
- af_unix plugin: restore original behavior in binary mode
  Resolves: RHEL-59585
- Support image mode
  Resolves: RHEL-69033
- Resolve ordering cycle when using remote logging
  Resolves: RHEL-11252
- Filter syscalls to ensure architecture-specific availability
  Resolves: RHEL-70455</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-3" date="1738584000">- Don't do "live" operations during rpm-ostree composes
  Resolves: RHEL-69033</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-4" date="1739275200">- auditctl: correct buffer in filter_supported_syscalls to avoid overflow
  Resolves: RHEL-59585</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-5" date="1743163200">- ausearch: correct search for DAEMON related events
- allow hex digits when interpreting tty data
  Resolves: RHEL-82279
- Fix TTY hostname in log messages
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-6" date="1743595200">- Update end of event detection mechanism
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-7" date="1744372800">- ausearch-checkpoint race condition fix
  Resolves: RHEL-86897</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-8" date="1767700800">- Fix POSTIN scriplet to not fail during upgrade
  Resolves: RHEL-138696</changelog>
</package>
<package pkgid="958bc2ab39b72733868ebee739c2403c49c2d3ddca278d77c5a46a75831b4d29" name="audit-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.5" rel="8.el9"/>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-1" date="1720526400">- New upstream maintenance release, 3.1.4
- Prevent scriplets from failing
- When upgrading, restart the daemon if it's running
- If uninstalling, stop the daemon
- auditctl: use pidfd_send_signal for signaling auditd
  Resolves: RHEL-45865
- Minor doc update
  Resolves: RHEL-5186
- augenrules: do not exit with failure if in immutable mode
  Resolves: RHEL-40110
- auditd.service: Disable ProtectControlGroups
  Resolves: RHEL-5197
- auditctl: correct output when displaying rules with exe/path/dir
  Resolves: RHEL-40243</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-2" date="1736337600">- Disable ProtectKernelModules=true in service file
  Resolves: RHEL-59570
- af_unix plugin: restore original behavior in binary mode
  Resolves: RHEL-59585
- Support image mode
  Resolves: RHEL-69033
- Resolve ordering cycle when using remote logging
  Resolves: RHEL-11252
- Filter syscalls to ensure architecture-specific availability
  Resolves: RHEL-70455</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-3" date="1738584000">- Don't do "live" operations during rpm-ostree composes
  Resolves: RHEL-69033</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-4" date="1739275200">- auditctl: correct buffer in filter_supported_syscalls to avoid overflow
  Resolves: RHEL-59585</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-5" date="1743163200">- ausearch: correct search for DAEMON related events
- allow hex digits when interpreting tty data
  Resolves: RHEL-82279
- Fix TTY hostname in log messages
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-6" date="1743595200">- Update end of event detection mechanism
  Resolves: RHEL-78323</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-7" date="1744372800">- ausearch-checkpoint race condition fix
  Resolves: RHEL-86897</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 3.1.5-8" date="1767700800">- Fix POSTIN scriplet to not fail during upgrade
  Resolves: RHEL-138696</changelog>
</package>
<package pkgid="6b8a77905bbf5f2bb6d4788b9c5d1616333b86f5e733197d6da9d064a128a98e" name="autofs-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.1.7" rel="65.el9_8.3"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-59" date="1734350400">- RHEL-69485 - Sporadic mount failures with amd program maps on RHEL8
  - fix amd external mount error handling.
  - fix amd external mount mount handling.
  - don't free ext mount if mounted.
  - refactor amd function do_program_mount().
  - refactor umount_amd_ext_mount().
  - add flags argument to amd do_program_mount().
- Resolves: RHEL-69485
- RHEL-71359 RFE: autofs: add handling for AMD 'nounmount' option
  - fix amd cache options not copied.
  - seperate amd mount and entry flags.
  - make iocl ops -&gt;timeout() handle per-dentry expire.
  - refactor amd mount options handling.
  - add some unimplemented amd map options.
  - fix lookup search type in umount_subtree_mounts().
  - fix remount_active_mount() not remounting symlinks.
  - log when setting amd per-mount timeout.
  - update per-mount expire timeout on readmap.
  - clear per-mount timeout if not set.
- Resolves: RHEL-71359
- RHEL-57466 - RHEL9.4 - autofs crashes on startup after IDM client configuration
  - fix submount shutdown race.
- Resolves: RHEL-57466</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-60" date="1738843200">- RHEL-77321 - autofs: deadlock between mnts_lookup_mount and mnts_remove_mount
  - fix deadlock in master_notify_submount().
- Resolves: RHEL-77321</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-61" date="1741953600">- RHEL-32684 - sssd autofs fails to get correct EHOSTDOWN if requested
  incorrect mount after upgrade to sssd-2.9.1-4.el8_9.5.x86_64
  - handle sss special case getautomntbyname() error
- Resolves: RHEL-32684</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-63" date="1744804800">- RHEL-87031 - autofs hang - autofs-5.1.4-114.el8_10.2
  - fix lock ordering deadlock in expire_cleanup().
  - change spec file %patchN to %patch -P N as required by rpm(8).
  - Fix compile error caused by function pointer types in cyrus-sasl module.
  - removed references to patch1 and patch2 due to rbmbuild(8) complaints.
- Resolves: RHEL-87031</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-64" date="1746619200">- RHEL-81885 - autofs: segfault while dereferencing null mapent
  - fix handling of ignored offsets.
  - fix invalidated map entry handling in hosts module.
  - fix changelog revision number of previous change.
- Resolves: RHEL-81885</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-65" date="1747137600">- RHEL-85615 - autofs fails to mount shares when using kerberised LDAP
  - always recreate credential cache.
  - fix always recreate credential cache.
-Resolves: RHEL-85615</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-65.el9_8.1" date="1773835200">- RHEL-154192 - Wrong oz_pgrp in autofs_sb_info causes automount to wait
  on automount.
  - quiet possibly noisy log message.
  - fix devid update on reload.
  - fix cache writelock must be taken in update_map_cache().
  - fix skip valid map entries on expire cleanup.
  - remove unnecessary call to set_direct_mount_tree_catatonic().
  - remove unnecessary assignment in umount_multi().
  - fix direct mount trigger umount failure case.
  - refactor do_umount_autofs_direct().
  - fix stale direct mount trigger not umounted on expire.
  - add function table_lookup_ino().
  - improve handling of missing map entry for mount request.
- Resolves: RHEL-154192</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-65.el9_8.2" date="1774267200">- RHEL-158216 - get_proximity returns a worng proximity on specific
  addresses [rhel-9.8.z]
  - Fix masks in parse_sub.c, so that hosts are correctly matched.
- Resolves: RHEL-158216</changelog>
  <changelog author="Veronika Kabatova &lt;vkabatov@redhat.com&gt; - 1:5.1.7-65.el9_8.3" date="1774958400">- Rebuild to fix missing binaries due to buildsystem oversight</changelog>
</package>
<package pkgid="a64239b27c00caf40b59d1da98fd7ac970cffc5ea210cb9c1ef8e69ac665cc8c" name="autofs-debugsource" arch="x86_64">
  <version epoch="1" ver="5.1.7" rel="65.el9_8.3"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-59" date="1734350400">- RHEL-69485 - Sporadic mount failures with amd program maps on RHEL8
  - fix amd external mount error handling.
  - fix amd external mount mount handling.
  - don't free ext mount if mounted.
  - refactor amd function do_program_mount().
  - refactor umount_amd_ext_mount().
  - add flags argument to amd do_program_mount().
- Resolves: RHEL-69485
- RHEL-71359 RFE: autofs: add handling for AMD 'nounmount' option
  - fix amd cache options not copied.
  - seperate amd mount and entry flags.
  - make iocl ops -&gt;timeout() handle per-dentry expire.
  - refactor amd mount options handling.
  - add some unimplemented amd map options.
  - fix lookup search type in umount_subtree_mounts().
  - fix remount_active_mount() not remounting symlinks.
  - log when setting amd per-mount timeout.
  - update per-mount expire timeout on readmap.
  - clear per-mount timeout if not set.
- Resolves: RHEL-71359
- RHEL-57466 - RHEL9.4 - autofs crashes on startup after IDM client configuration
  - fix submount shutdown race.
- Resolves: RHEL-57466</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-60" date="1738843200">- RHEL-77321 - autofs: deadlock between mnts_lookup_mount and mnts_remove_mount
  - fix deadlock in master_notify_submount().
- Resolves: RHEL-77321</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-61" date="1741953600">- RHEL-32684 - sssd autofs fails to get correct EHOSTDOWN if requested
  incorrect mount after upgrade to sssd-2.9.1-4.el8_9.5.x86_64
  - handle sss special case getautomntbyname() error
- Resolves: RHEL-32684</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-63" date="1744804800">- RHEL-87031 - autofs hang - autofs-5.1.4-114.el8_10.2
  - fix lock ordering deadlock in expire_cleanup().
  - change spec file %patchN to %patch -P N as required by rpm(8).
  - Fix compile error caused by function pointer types in cyrus-sasl module.
  - removed references to patch1 and patch2 due to rbmbuild(8) complaints.
- Resolves: RHEL-87031</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-64" date="1746619200">- RHEL-81885 - autofs: segfault while dereferencing null mapent
  - fix handling of ignored offsets.
  - fix invalidated map entry handling in hosts module.
  - fix changelog revision number of previous change.
- Resolves: RHEL-81885</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-65" date="1747137600">- RHEL-85615 - autofs fails to mount shares when using kerberised LDAP
  - always recreate credential cache.
  - fix always recreate credential cache.
-Resolves: RHEL-85615</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-65.el9_8.1" date="1773835200">- RHEL-154192 - Wrong oz_pgrp in autofs_sb_info causes automount to wait
  on automount.
  - quiet possibly noisy log message.
  - fix devid update on reload.
  - fix cache writelock must be taken in update_map_cache().
  - fix skip valid map entries on expire cleanup.
  - remove unnecessary call to set_direct_mount_tree_catatonic().
  - remove unnecessary assignment in umount_multi().
  - fix direct mount trigger umount failure case.
  - refactor do_umount_autofs_direct().
  - fix stale direct mount trigger not umounted on expire.
  - add function table_lookup_ino().
  - improve handling of missing map entry for mount request.
- Resolves: RHEL-154192</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.7-65.el9_8.2" date="1774267200">- RHEL-158216 - get_proximity returns a worng proximity on specific
  addresses [rhel-9.8.z]
  - Fix masks in parse_sub.c, so that hosts are correctly matched.
- Resolves: RHEL-158216</changelog>
  <changelog author="Veronika Kabatova &lt;vkabatov@redhat.com&gt; - 1:5.1.7-65.el9_8.3" date="1774958400">- Rebuild to fix missing binaries due to buildsystem oversight</changelog>
</package>
<package pkgid="56d9e1dae802a400ef3e72a40d9a437385a4f75d1092c20993a95282d92be2e8" name="bind-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="40.el9_8.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;&lt;pemensik@redhat.com&gt;&gt; - 32:9.16.23-33" date="1757678400">- logrotate: skip if empty and remove old variants (RHEL-113942)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-34" date="1758024000">- Fix failures in idna system test (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-35" date="1761739200">- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
- Replace downstream fixes with upstream changes
- Address various spoofing attacks (CVE-2025-40778)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-36" date="1761739201">- Copy named.* files from /var/named into /usr/share/named</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-37" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-38" date="1765540801">- Add sysusers named user creation (RHEL-132053)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 32:9.16.23-39" date="1769083200">- Backport fix for nameserver line processing. (RHEL-79714)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
</package>
<package pkgid="073dfc6dee11673fc2269e02440fdb90c39d7755c3573dcd0bac38ace3282c26" name="bind-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="40.el9_8.8"/>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 32:9.16.23-39" date="1769083200">- Backport fix for nameserver line processing. (RHEL-79714)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.3" date="1784808000">- Prevent cache memory exhaustion under sustained attack
  (CVE-2026-11622, RHEL-213397)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.4" date="1785153600">- Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.5" date="1785153601">- Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3
  (CVE-2026-13204)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.6" date="1785153602">- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.7" date="1785153603">- Fix CVE-2026-13321: reject out-of-zone NSEC next owner names</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.8" date="1785153604">- Fix NSEC3 signer validation (CVE-2026-10723)</changelog>
</package>
<package pkgid="f5cdee0c17a047da5fa4b7fbf0e9d5be7405ccfdd6fd9036340a4e8908a07c7f" name="bind-debugsource" arch="i686">
  <version epoch="32" ver="9.16.23" rel="40.el9_8.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;&lt;pemensik@redhat.com&gt;&gt; - 32:9.16.23-33" date="1757678400">- logrotate: skip if empty and remove old variants (RHEL-113942)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-34" date="1758024000">- Fix failures in idna system test (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-35" date="1761739200">- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
- Replace downstream fixes with upstream changes
- Address various spoofing attacks (CVE-2025-40778)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-36" date="1761739201">- Copy named.* files from /var/named into /usr/share/named</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-37" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-38" date="1765540801">- Add sysusers named user creation (RHEL-132053)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 32:9.16.23-39" date="1769083200">- Backport fix for nameserver line processing. (RHEL-79714)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
</package>
<package pkgid="30d951289f0d7c588f9d3c8c666afc5af83d5422f8c368c8d8f018ff71ab5b56" name="bind-debugsource" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="40.el9_8.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;&lt;pemensik@redhat.com&gt;&gt; - 32:9.16.23-33" date="1757678400">- logrotate: skip if empty and remove old variants (RHEL-113942)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-34" date="1758024000">- Fix failures in idna system test (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-35" date="1761739200">- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
- Replace downstream fixes with upstream changes
- Address various spoofing attacks (CVE-2025-40778)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-36" date="1761739201">- Copy named.* files from /var/named into /usr/share/named</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-37" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-38" date="1765540801">- Add sysusers named user creation (RHEL-132053)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 32:9.16.23-39" date="1769083200">- Backport fix for nameserver line processing. (RHEL-79714)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
</package>
<package pkgid="bc12382ad63718e1a855e8b735eceddbd28cf6353879424461cfa8e6c49be624" name="bind-debugsource" arch="i686">
  <version epoch="32" ver="9.16.23" rel="40.el9_8.8"/>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 32:9.16.23-39" date="1769083200">- Backport fix for nameserver line processing. (RHEL-79714)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.3" date="1784808000">- Prevent cache memory exhaustion under sustained attack
  (CVE-2026-11622, RHEL-213397)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.4" date="1785153600">- Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.5" date="1785153601">- Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3
  (CVE-2026-13204)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.6" date="1785153602">- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.7" date="1785153603">- Fix CVE-2026-13321: reject out-of-zone NSEC next owner names</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.8" date="1785153604">- Fix NSEC3 signer validation (CVE-2026-10723)</changelog>
</package>
<package pkgid="14a0f49f2b1dd2a85e9603e405fcd00d15d751849adaddfd4e3e33f61b38dcc5" name="bind-debugsource" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="40.el9_8.8"/>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 32:9.16.23-39" date="1769083200">- Backport fix for nameserver line processing. (RHEL-79714)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.3" date="1784808000">- Prevent cache memory exhaustion under sustained attack
  (CVE-2026-11622, RHEL-213397)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.4" date="1785153600">- Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.5" date="1785153601">- Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3
  (CVE-2026-13204)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.6" date="1785153602">- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.7" date="1785153603">- Fix CVE-2026-13321: reject out-of-zone NSEC next owner names</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.8" date="1785153604">- Fix NSEC3 signer validation (CVE-2026-10723)</changelog>
</package>
<package pkgid="09704f2b5878f2d09af675dc6e8ea7b2eb65e42410e2fbcefeb4ef1ff52fdde4" name="bind-dnssec-utils-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="40.el9_8.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;&lt;pemensik@redhat.com&gt;&gt; - 32:9.16.23-33" date="1757678400">- logrotate: skip if empty and remove old variants (RHEL-113942)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-34" date="1758024000">- Fix failures in idna system test (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-35" date="1761739200">- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
- Replace downstream fixes with upstream changes
- Address various spoofing attacks (CVE-2025-40778)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-36" date="1761739201">- Copy named.* files from /var/named into /usr/share/named</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-37" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-38" date="1765540801">- Add sysusers named user creation (RHEL-132053)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 32:9.16.23-39" date="1769083200">- Backport fix for nameserver line processing. (RHEL-79714)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
</package>
<package pkgid="89c1215334000e84b32640b224d4ef86762de253b874fce6290a5b0ba22763e6" name="bind-dnssec-utils-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="40.el9_8.8"/>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 32:9.16.23-39" date="1769083200">- Backport fix for nameserver line processing. (RHEL-79714)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.3" date="1784808000">- Prevent cache memory exhaustion under sustained attack
  (CVE-2026-11622, RHEL-213397)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.4" date="1785153600">- Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.5" date="1785153601">- Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3
  (CVE-2026-13204)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.6" date="1785153602">- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.7" date="1785153603">- Fix CVE-2026-13321: reject out-of-zone NSEC next owner names</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.8" date="1785153604">- Fix NSEC3 signer validation (CVE-2026-10723)</changelog>
</package>
<package pkgid="c63021c370cd34c949db6d45f0ced0861705a4b3de9d863b94244a403ea50aa8" name="bind-libs-debuginfo" arch="i686">
  <version epoch="32" ver="9.16.23" rel="40.el9_8.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;&lt;pemensik@redhat.com&gt;&gt; - 32:9.16.23-33" date="1757678400">- logrotate: skip if empty and remove old variants (RHEL-113942)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-34" date="1758024000">- Fix failures in idna system test (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-35" date="1761739200">- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
- Replace downstream fixes with upstream changes
- Address various spoofing attacks (CVE-2025-40778)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-36" date="1761739201">- Copy named.* files from /var/named into /usr/share/named</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-37" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-38" date="1765540801">- Add sysusers named user creation (RHEL-132053)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 32:9.16.23-39" date="1769083200">- Backport fix for nameserver line processing. (RHEL-79714)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
</package>
<package pkgid="7da7779232fb0bd24aca80736e54752d12feb661ce47da6cc5d23d0246fe0ed1" name="bind-libs-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="40.el9_8.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;&lt;pemensik@redhat.com&gt;&gt; - 32:9.16.23-33" date="1757678400">- logrotate: skip if empty and remove old variants (RHEL-113942)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-34" date="1758024000">- Fix failures in idna system test (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-35" date="1761739200">- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
- Replace downstream fixes with upstream changes
- Address various spoofing attacks (CVE-2025-40778)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-36" date="1761739201">- Copy named.* files from /var/named into /usr/share/named</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-37" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-38" date="1765540801">- Add sysusers named user creation (RHEL-132053)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 32:9.16.23-39" date="1769083200">- Backport fix for nameserver line processing. (RHEL-79714)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
</package>
<package pkgid="403c0c87c32783881ee4373b047f213511812e20e146ca3bb73990b17749e2c5" name="bind-libs-debuginfo" arch="i686">
  <version epoch="32" ver="9.16.23" rel="40.el9_8.8"/>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 32:9.16.23-39" date="1769083200">- Backport fix for nameserver line processing. (RHEL-79714)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.3" date="1784808000">- Prevent cache memory exhaustion under sustained attack
  (CVE-2026-11622, RHEL-213397)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.4" date="1785153600">- Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.5" date="1785153601">- Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3
  (CVE-2026-13204)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.6" date="1785153602">- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.7" date="1785153603">- Fix CVE-2026-13321: reject out-of-zone NSEC next owner names</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.8" date="1785153604">- Fix NSEC3 signer validation (CVE-2026-10723)</changelog>
</package>
<package pkgid="244e62a48e91a93ad87d824b2d7caf24509267f8e188dfe4f17a0bc2588b4f32" name="bind-libs-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="40.el9_8.8"/>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 32:9.16.23-39" date="1769083200">- Backport fix for nameserver line processing. (RHEL-79714)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.3" date="1784808000">- Prevent cache memory exhaustion under sustained attack
  (CVE-2026-11622, RHEL-213397)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.4" date="1785153600">- Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.5" date="1785153601">- Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3
  (CVE-2026-13204)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.6" date="1785153602">- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.7" date="1785153603">- Fix CVE-2026-13321: reject out-of-zone NSEC next owner names</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.8" date="1785153604">- Fix NSEC3 signer validation (CVE-2026-10723)</changelog>
</package>
<package pkgid="132872ab0b72f14f5beb0835c9ba1f1606f7de591a77f493e4e98d97175093d9" name="bind-utils-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="40.el9_8.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;&lt;pemensik@redhat.com&gt;&gt; - 32:9.16.23-33" date="1757678400">- logrotate: skip if empty and remove old variants (RHEL-113942)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-34" date="1758024000">- Fix failures in idna system test (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-35" date="1761739200">- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
- Replace downstream fixes with upstream changes
- Address various spoofing attacks (CVE-2025-40778)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-36" date="1761739201">- Copy named.* files from /var/named into /usr/share/named</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-37" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-38" date="1765540801">- Add sysusers named user creation (RHEL-132053)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 32:9.16.23-39" date="1769083200">- Backport fix for nameserver line processing. (RHEL-79714)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
</package>
<package pkgid="bcdb36633b172a7d6cbe0aef89da5b6351f3e5f16fad6fe5347b5c412bd65aed" name="bind-utils-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.16.23" rel="40.el9_8.8"/>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 32:9.16.23-39" date="1769083200">- Backport fix for nameserver line processing. (RHEL-79714)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.16.23-40.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.3" date="1784808000">- Prevent cache memory exhaustion under sustained attack
  (CVE-2026-11622, RHEL-213397)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.4" date="1785153600">- Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.5" date="1785153601">- Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3
  (CVE-2026-13204)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.6" date="1785153602">- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.7" date="1785153603">- Fix CVE-2026-13321: reject out-of-zone NSEC next owner names</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.16.23-40.8" date="1785153604">- Fix NSEC3 signer validation (CVE-2026-10723)</changelog>
</package>
<package pkgid="984054cd401fd9873b65730a3011bbbe0c74e8fbd7c147893a92268608acbfff" name="bind9.18-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.18.29" rel="14.el9_8.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-7" date="1761912000">- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
- Add upstream created test to this regression</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-8" date="1761912001">- Copy named.* files from /usr/share/named into var/named</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-9" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-10" date="1765540801">- Add missing bind-chroot subdirectories</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-11" date="1765540802">- Add sysusers named user creation (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-12" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-13" date="1769688000">- Correct changelog version of previous change</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.1" date="1775044800">- Correct backport issue in the patch (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
</package>
<package pkgid="619cf90c53070a19639e2adf12587afb6acaa6ac9133f293a122bda17ccb75c6" name="bind9.18-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.18.29" rel="14.el9_8.8"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-13" date="1769688000">- Correct changelog version of previous change</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.1" date="1775044800">- Correct backport issue in the patch (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.3" date="1784808000">- Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204,
  RHEL-213495)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.4" date="1784808001">- Fix RPZ wildcard expansion self-referential CNAME
  (CVE-2026-11331, RHEL-213495)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.5" date="1784808002">- Reject invalid signed wildcard records (CVE-2026-11721,
  RHEL-213417)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.6" date="1784808003">- Fix cache exhaustion via dns_slabheaders (CVE-2026-11622,
  RHEL-213389)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.7" date="1784894400">- Reject out-of-zone NSEC next owner names (CVE-2026-13321,
  RHEL-213314)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.8" date="1784980800">- Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704)</changelog>
</package>
<package pkgid="8b58bc4e0f0f3198682f104d7cb4e6d71bfa82a2ab65e70c75dc779c604ae77d" name="bind9.18-debugsource" arch="i686">
  <version epoch="32" ver="9.18.29" rel="14.el9_8.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-7" date="1761912000">- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
- Add upstream created test to this regression</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-8" date="1761912001">- Copy named.* files from /usr/share/named into var/named</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-9" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-10" date="1765540801">- Add missing bind-chroot subdirectories</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-11" date="1765540802">- Add sysusers named user creation (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-12" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-13" date="1769688000">- Correct changelog version of previous change</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.1" date="1775044800">- Correct backport issue in the patch (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
</package>
<package pkgid="b1a94cc3ed88fc584e34452bc729c7ff1fd153b089b48d2368dc376def3d9047" name="bind9.18-debugsource" arch="x86_64">
  <version epoch="32" ver="9.18.29" rel="14.el9_8.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-7" date="1761912000">- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
- Add upstream created test to this regression</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-8" date="1761912001">- Copy named.* files from /usr/share/named into var/named</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-9" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-10" date="1765540801">- Add missing bind-chroot subdirectories</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-11" date="1765540802">- Add sysusers named user creation (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-12" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-13" date="1769688000">- Correct changelog version of previous change</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.1" date="1775044800">- Correct backport issue in the patch (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
</package>
<package pkgid="c5888e8a5347a01d846795cea07301b3bb47b82121ca8408d977202e3d9361d1" name="bind9.18-debugsource" arch="i686">
  <version epoch="32" ver="9.18.29" rel="14.el9_8.8"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-13" date="1769688000">- Correct changelog version of previous change</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.1" date="1775044800">- Correct backport issue in the patch (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.3" date="1784808000">- Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204,
  RHEL-213495)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.4" date="1784808001">- Fix RPZ wildcard expansion self-referential CNAME
  (CVE-2026-11331, RHEL-213495)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.5" date="1784808002">- Reject invalid signed wildcard records (CVE-2026-11721,
  RHEL-213417)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.6" date="1784808003">- Fix cache exhaustion via dns_slabheaders (CVE-2026-11622,
  RHEL-213389)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.7" date="1784894400">- Reject out-of-zone NSEC next owner names (CVE-2026-13321,
  RHEL-213314)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.8" date="1784980800">- Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704)</changelog>
</package>
<package pkgid="29c5704748495031feb81356a888c1a6827c14dab0f358dad6d62f096147368d" name="bind9.18-debugsource" arch="x86_64">
  <version epoch="32" ver="9.18.29" rel="14.el9_8.8"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-13" date="1769688000">- Correct changelog version of previous change</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.1" date="1775044800">- Correct backport issue in the patch (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.3" date="1784808000">- Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204,
  RHEL-213495)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.4" date="1784808001">- Fix RPZ wildcard expansion self-referential CNAME
  (CVE-2026-11331, RHEL-213495)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.5" date="1784808002">- Reject invalid signed wildcard records (CVE-2026-11721,
  RHEL-213417)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.6" date="1784808003">- Fix cache exhaustion via dns_slabheaders (CVE-2026-11622,
  RHEL-213389)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.7" date="1784894400">- Reject out-of-zone NSEC next owner names (CVE-2026-13321,
  RHEL-213314)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.8" date="1784980800">- Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704)</changelog>
</package>
<package pkgid="2812d6c8f450419fe8a02311e4e9b517f5c2fbf448954a51508a4eefef6c2f13" name="bind9.18-dnssec-utils-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.18.29" rel="14.el9_8.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-7" date="1761912000">- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
- Add upstream created test to this regression</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-8" date="1761912001">- Copy named.* files from /usr/share/named into var/named</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-9" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-10" date="1765540801">- Add missing bind-chroot subdirectories</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-11" date="1765540802">- Add sysusers named user creation (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-12" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-13" date="1769688000">- Correct changelog version of previous change</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.1" date="1775044800">- Correct backport issue in the patch (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
</package>
<package pkgid="92ac28f647c818d97b87c949bf4c114afd5ae1c39e20143a6436cb90e24b3c7a" name="bind9.18-dnssec-utils-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.18.29" rel="14.el9_8.8"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-13" date="1769688000">- Correct changelog version of previous change</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.1" date="1775044800">- Correct backport issue in the patch (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.3" date="1784808000">- Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204,
  RHEL-213495)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.4" date="1784808001">- Fix RPZ wildcard expansion self-referential CNAME
  (CVE-2026-11331, RHEL-213495)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.5" date="1784808002">- Reject invalid signed wildcard records (CVE-2026-11721,
  RHEL-213417)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.6" date="1784808003">- Fix cache exhaustion via dns_slabheaders (CVE-2026-11622,
  RHEL-213389)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.7" date="1784894400">- Reject out-of-zone NSEC next owner names (CVE-2026-13321,
  RHEL-213314)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.8" date="1784980800">- Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704)</changelog>
</package>
<package pkgid="29a8bb4bddc2e8b4007e20bb6d88bd666433071815252faa93fc2c3469af0a18" name="bind9.18-libs-debuginfo" arch="i686">
  <version epoch="32" ver="9.18.29" rel="14.el9_8.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-7" date="1761912000">- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
- Add upstream created test to this regression</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-8" date="1761912001">- Copy named.* files from /usr/share/named into var/named</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-9" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-10" date="1765540801">- Add missing bind-chroot subdirectories</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-11" date="1765540802">- Add sysusers named user creation (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-12" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-13" date="1769688000">- Correct changelog version of previous change</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.1" date="1775044800">- Correct backport issue in the patch (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
</package>
<package pkgid="208fd5db5ae40acdcf192d9ef7d9c95333b9e5de878d426b921784c2fdce43e6" name="bind9.18-libs-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.18.29" rel="14.el9_8.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-7" date="1761912000">- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
- Add upstream created test to this regression</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-8" date="1761912001">- Copy named.* files from /usr/share/named into var/named</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-9" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-10" date="1765540801">- Add missing bind-chroot subdirectories</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-11" date="1765540802">- Add sysusers named user creation (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-12" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-13" date="1769688000">- Correct changelog version of previous change</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.1" date="1775044800">- Correct backport issue in the patch (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
</package>
<package pkgid="d9ca832ae3edc531a84a8d5bbb8e4f9bb5e44cb22d66a4f6d19c717bd1271240" name="bind9.18-libs-debuginfo" arch="i686">
  <version epoch="32" ver="9.18.29" rel="14.el9_8.8"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-13" date="1769688000">- Correct changelog version of previous change</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.1" date="1775044800">- Correct backport issue in the patch (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.3" date="1784808000">- Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204,
  RHEL-213495)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.4" date="1784808001">- Fix RPZ wildcard expansion self-referential CNAME
  (CVE-2026-11331, RHEL-213495)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.5" date="1784808002">- Reject invalid signed wildcard records (CVE-2026-11721,
  RHEL-213417)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.6" date="1784808003">- Fix cache exhaustion via dns_slabheaders (CVE-2026-11622,
  RHEL-213389)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.7" date="1784894400">- Reject out-of-zone NSEC next owner names (CVE-2026-13321,
  RHEL-213314)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.8" date="1784980800">- Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704)</changelog>
</package>
<package pkgid="f1b8a6eb14e5302038d117ac65c13e438907d3e56027651ec3cced9d8e5c920a" name="bind9.18-libs-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.18.29" rel="14.el9_8.8"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-13" date="1769688000">- Correct changelog version of previous change</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.1" date="1775044800">- Correct backport issue in the patch (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.3" date="1784808000">- Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204,
  RHEL-213495)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.4" date="1784808001">- Fix RPZ wildcard expansion self-referential CNAME
  (CVE-2026-11331, RHEL-213495)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.5" date="1784808002">- Reject invalid signed wildcard records (CVE-2026-11721,
  RHEL-213417)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.6" date="1784808003">- Fix cache exhaustion via dns_slabheaders (CVE-2026-11622,
  RHEL-213389)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.7" date="1784894400">- Reject out-of-zone NSEC next owner names (CVE-2026-13321,
  RHEL-213314)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.8" date="1784980800">- Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704)</changelog>
</package>
<package pkgid="b5eca2c449914f44f7099044c85d1a85f0c9877f75137720cbbeb04c8c3cb037" name="bind9.18-utils-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.18.29" rel="14.el9_8.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-7" date="1761912000">- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
- Add upstream created test to this regression</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-8" date="1761912001">- Copy named.* files from /usr/share/named into var/named</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-9" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-10" date="1765540801">- Add missing bind-chroot subdirectories</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-11" date="1765540802">- Add sysusers named user creation (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-12" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-13" date="1769688000">- Correct changelog version of previous change</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.1" date="1775044800">- Correct backport issue in the patch (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
</package>
<package pkgid="cd36f8aea8eec3cb94786b28d8e2abf39b7a84d46025de501e2a8b92ee11a5c3" name="bind9.18-utils-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.18.29" rel="14.el9_8.8"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-13" date="1769688000">- Correct changelog version of previous change</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.1" date="1775044800">- Correct backport issue in the patch (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.29-14.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.3" date="1784808000">- Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204,
  RHEL-213495)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.4" date="1784808001">- Fix RPZ wildcard expansion self-referential CNAME
  (CVE-2026-11331, RHEL-213495)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.5" date="1784808002">- Reject invalid signed wildcard records (CVE-2026-11721,
  RHEL-213417)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.6" date="1784808003">- Fix cache exhaustion via dns_slabheaders (CVE-2026-11622,
  RHEL-213389)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.7" date="1784894400">- Reject out-of-zone NSEC next owner names (CVE-2026-13321,
  RHEL-213314)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.29-14.8" date="1784980800">- Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704)</changelog>
</package>
<package pkgid="205aed58b874abf774f1c7bfea547650242d92d18cb93ad6e5f993170ce6163b" name="binutils-debuginfo" arch="i686">
  <version epoch="0" ver="2.35.2" rel="72.el9"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-62" date="1738238400">- Retire: binutils-rhivos-segment-gap.patch.  (RHEL-60807)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-63" date="1738929600">- Fix seg-fault in AArch64 linker when building u-boot.  (RHEL-78350)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-64" date="1744718400">- Adds z17 as a cpu name for the s390x architecture.  (RHEL-87216)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-65" date="1748865600">- NVR bump to allow rebuilding for RHEL-9.7  (RHEL-87216)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-66" date="1753185600">- Add missing tests of AArch64 instructions to the assembler testsuite.  (RHEL-104630)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-67" date="1755604800">- Adds tests for the linker's --error-execstack and --error-rwx-segments command line options.  (RHEL-109970)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-68" date="1757505600">- Add missing space to ppc476-shared2 linker test.  (RHEL-113842)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-69" date="1762862400">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-126883)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-71" date="1765886400">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-132287)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-72" date="1768824000">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-142281)</changelog>
</package>
<package pkgid="6ce120a27bd3b28aee71a41fc4b5729f19e11f50abcad73af950cc88f06fc5c9" name="binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.2" rel="72.el9"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-62" date="1738238400">- Retire: binutils-rhivos-segment-gap.patch.  (RHEL-60807)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-63" date="1738929600">- Fix seg-fault in AArch64 linker when building u-boot.  (RHEL-78350)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-64" date="1744718400">- Adds z17 as a cpu name for the s390x architecture.  (RHEL-87216)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-65" date="1748865600">- NVR bump to allow rebuilding for RHEL-9.7  (RHEL-87216)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-66" date="1753185600">- Add missing tests of AArch64 instructions to the assembler testsuite.  (RHEL-104630)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-67" date="1755604800">- Adds tests for the linker's --error-execstack and --error-rwx-segments command line options.  (RHEL-109970)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-68" date="1757505600">- Add missing space to ppc476-shared2 linker test.  (RHEL-113842)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-69" date="1762862400">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-126883)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-71" date="1765886400">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-132287)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-72" date="1768824000">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-142281)</changelog>
</package>
<package pkgid="dc50230cae80770460f3ff13e44f4a69c5b912ae8d52646274c577eaf723cfab" name="binutils-gold-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.2" rel="72.el9"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-62" date="1738238400">- Retire: binutils-rhivos-segment-gap.patch.  (RHEL-60807)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-63" date="1738929600">- Fix seg-fault in AArch64 linker when building u-boot.  (RHEL-78350)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-64" date="1744718400">- Adds z17 as a cpu name for the s390x architecture.  (RHEL-87216)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-65" date="1748865600">- NVR bump to allow rebuilding for RHEL-9.7  (RHEL-87216)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-66" date="1753185600">- Add missing tests of AArch64 instructions to the assembler testsuite.  (RHEL-104630)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-67" date="1755604800">- Adds tests for the linker's --error-execstack and --error-rwx-segments command line options.  (RHEL-109970)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-68" date="1757505600">- Add missing space to ppc476-shared2 linker test.  (RHEL-113842)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-69" date="1762862400">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-126883)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-71" date="1765886400">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-132287)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.35.2-72" date="1768824000">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-142281)</changelog>
</package>
<package pkgid="ba0de54003973074de292c2cf10522df2d841276aa505e46f81dd2f09823a193" name="bluez-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.85" rel="1.el9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-1" date="1707998400">- Update to 5.72</changelog>
  <changelog author="David Marlin &lt;dmarlin@redhat.com&gt; - 5.72-2" date="1721044800">- Bump release to rebuild for RHEL-9.5</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-3" date="1737547200">- Fix ConfigurationDirectory startup warning
  Related: RHEL-71798</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-4" date="1737720000">- Fix plugin_init() startup warnings
  Related: RHEL-68934</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
  Resolves: RHEL-94819
  Resolves: RHEL-56073
  Resolves: RHEL-1924</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103966</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142552</changelog>
</package>
<package pkgid="bd920ff9dd7e65166d9642fd84f106db050f53596936a4152da67148a79713ad" name="bluez-libs-debuginfo" arch="i686">
  <version epoch="0" ver="5.85" rel="1.el9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-1" date="1707998400">- Update to 5.72</changelog>
  <changelog author="David Marlin &lt;dmarlin@redhat.com&gt; - 5.72-2" date="1721044800">- Bump release to rebuild for RHEL-9.5</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-3" date="1737547200">- Fix ConfigurationDirectory startup warning
  Related: RHEL-71798</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-4" date="1737720000">- Fix plugin_init() startup warnings
  Related: RHEL-68934</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
  Resolves: RHEL-94819
  Resolves: RHEL-56073
  Resolves: RHEL-1924</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103966</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142552</changelog>
</package>
<package pkgid="e3f13bbb9a2b6e8d6dea5a7466f2e8d537b033c1af9025764c5baf04b23f7761" name="bluez-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.85" rel="1.el9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-1" date="1707998400">- Update to 5.72</changelog>
  <changelog author="David Marlin &lt;dmarlin@redhat.com&gt; - 5.72-2" date="1721044800">- Bump release to rebuild for RHEL-9.5</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-3" date="1737547200">- Fix ConfigurationDirectory startup warning
  Related: RHEL-71798</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-4" date="1737720000">- Fix plugin_init() startup warnings
  Related: RHEL-68934</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
  Resolves: RHEL-94819
  Resolves: RHEL-56073
  Resolves: RHEL-1924</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103966</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142552</changelog>
</package>
<package pkgid="ceb38efdb0148f5dcfb14af88e78f4bd13191a4a60625bb2d55b2bf41d86dbfc" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5.0" rel="804.el9"/>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 7.5.0-1" date="1736251200">- Initial commit on c9s</changelog>
  <changelog author="Ziqian SUN (Zamir) &lt;zsun@redhat.com&gt; - 7.5.0-2" date="1736510400">- Initial gating test for bpftool</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 7.5.0-3" date="1741176000">- Fix LLVM feature detection</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 7.5.0-4" date="1741176001">- Update to BPF 6.12 rebase</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 7.5.0-5" date="1741262400">- Make kernel tarball dist independent of %{dist}</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 7.5.0-6" date="1752062400">- Update to BPF 6.14 stable backport</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 7.5.0-7" date="1764936000">- Update to BPF 6.17 stable backport</changelog>
</package>
<package pkgid="050dbceca233df09576f44d18276a174c5808a59b283a673d180c3068f1105f8" name="bpftool-debugsource" arch="x86_64">
  <version epoch="0" ver="7.5.0" rel="804.el9"/>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 7.5.0-1" date="1736251200">- Initial commit on c9s</changelog>
  <changelog author="Ziqian SUN (Zamir) &lt;zsun@redhat.com&gt; - 7.5.0-2" date="1736510400">- Initial gating test for bpftool</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 7.5.0-3" date="1741176000">- Fix LLVM feature detection</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 7.5.0-4" date="1741176001">- Update to BPF 6.12 rebase</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 7.5.0-5" date="1741262400">- Make kernel tarball dist independent of %{dist}</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 7.5.0-6" date="1752062400">- Update to BPF 6.14 stable backport</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 7.5.0-7" date="1764936000">- Update to BPF 6.17 stable backport</changelog>
</package>
<package pkgid="403a20948deda4255a7a224821264db390b38b8dbde8defff3fccb12c1efbcfb" name="bsdtar-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.5.3" rel="11.el9_8"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-5" date="1749124800">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-6" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-7" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-8" date="1774353600">- Release bump</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-9" date="1775736000">- Resolves: CVE-2026-4424
- Resolves: CVE-2026-5121</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-10" date="1782820800">- Resolves: CVE-2026-14164</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-11" date="1784203200">- Related: CVE-2026-14164</changelog>
</package>
<package pkgid="2435dc951f7f3b46b32bf29f3289ce1e77cc21f28d132c21397f199398b2a62d" name="buildah-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.43.1" rel="2.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.0-1" date="1753358400">- update to https://github.com/containers/buildah/releases/tag/v1.41.0
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.1-1" date="1754913600">- update to https://github.com/containers/buildah/releases/tag/v1.41.1
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.3-1" date="1755518400">- update to https://github.com/containers/buildah/releases/tag/v1.41.3
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.4-1" date="1758024000">- update to https://github.com/containers/buildah/releases/tag/v1.41.4
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.8-1" date="1770206400">- update to https://github.com/containers/buildah/releases/tag/v1.41.8
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-1" date="1770638400">- update to https://github.com/containers/buildah/releases/tag/v1.43.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-61726
- Resolves: RHEL-146099</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-3" date="1775563200">- update to the latest content of https://github.com/containers/buildah/tree/release-1.43
  (https://github.com/containers/buildah/commit/bbc4bd1)
- Resolves: RHEL-95964</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-1" date="1776340800">- update to https://github.com/containers/buildah/releases/tag/v1.43.1
- fixes CVE-2026-34986
- Resolves: RHEL-165035</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 102:1.43.1-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158759</changelog>
</package>
<package pkgid="c28734d7e60e7c9d07d5cdec181da05ec2031b7f8f007319fc5ec5f4c401b126" name="buildah-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.43.1" rel="3.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.1-1" date="1754913600">- update to https://github.com/containers/buildah/releases/tag/v1.41.1
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.3-1" date="1755518400">- update to https://github.com/containers/buildah/releases/tag/v1.41.3
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.4-1" date="1758024000">- update to https://github.com/containers/buildah/releases/tag/v1.41.4
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.8-1" date="1770206400">- update to https://github.com/containers/buildah/releases/tag/v1.41.8
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-1" date="1770638400">- update to https://github.com/containers/buildah/releases/tag/v1.43.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-61726
- Resolves: RHEL-146099</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-3" date="1775563200">- update to the latest content of https://github.com/containers/buildah/tree/release-1.43
  (https://github.com/containers/buildah/commit/bbc4bd1)
- Resolves: RHEL-95964</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-1" date="1776340800">- update to https://github.com/containers/buildah/releases/tag/v1.43.1
- fixes CVE-2026-34986
- Resolves: RHEL-165035</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 102:1.43.1-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158759</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-3" date="1783512000">- bump golang.org/x/crypto to v0.53.0 to fix CVE-2026-39832 and CVE-2026-39835
- Resolves: RHEL-188733 RHEL-190066</changelog>
</package>
<package pkgid="1324542a8b174287a914fca841bbd41d25b4d49e247fb3d14c74f21bf0e7f15a" name="buildah-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.43.1" rel="4.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.3-1" date="1755518400">- update to https://github.com/containers/buildah/releases/tag/v1.41.3
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.4-1" date="1758024000">- update to https://github.com/containers/buildah/releases/tag/v1.41.4
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.8-1" date="1770206400">- update to https://github.com/containers/buildah/releases/tag/v1.41.8
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-1" date="1770638400">- update to https://github.com/containers/buildah/releases/tag/v1.43.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-61726
- Resolves: RHEL-146099</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-3" date="1775563200">- update to the latest content of https://github.com/containers/buildah/tree/release-1.43
  (https://github.com/containers/buildah/commit/bbc4bd1)
- Resolves: RHEL-95964</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-1" date="1776340800">- update to https://github.com/containers/buildah/releases/tag/v1.43.1
- fixes CVE-2026-34986
- Resolves: RHEL-165035</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 102:1.43.1-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158759</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-3" date="1783512000">- bump golang.org/x/crypto to v0.53.0 to fix CVE-2026-39832 and CVE-2026-39835
- Resolves: RHEL-188733 RHEL-190066</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-4" date="1783684800">- rebuild for CVE-2026-39822
- Resolves: RHEL-193645</changelog>
</package>
<package pkgid="1cf3c50035904a9523b958f9069fb4f34ac33c11cce89179837657d5a3df4f2a" name="buildah-debugsource" arch="x86_64">
  <version epoch="2" ver="1.43.1" rel="2.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.0-1" date="1753358400">- update to https://github.com/containers/buildah/releases/tag/v1.41.0
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.1-1" date="1754913600">- update to https://github.com/containers/buildah/releases/tag/v1.41.1
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.3-1" date="1755518400">- update to https://github.com/containers/buildah/releases/tag/v1.41.3
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.4-1" date="1758024000">- update to https://github.com/containers/buildah/releases/tag/v1.41.4
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.8-1" date="1770206400">- update to https://github.com/containers/buildah/releases/tag/v1.41.8
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-1" date="1770638400">- update to https://github.com/containers/buildah/releases/tag/v1.43.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-61726
- Resolves: RHEL-146099</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-3" date="1775563200">- update to the latest content of https://github.com/containers/buildah/tree/release-1.43
  (https://github.com/containers/buildah/commit/bbc4bd1)
- Resolves: RHEL-95964</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-1" date="1776340800">- update to https://github.com/containers/buildah/releases/tag/v1.43.1
- fixes CVE-2026-34986
- Resolves: RHEL-165035</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 102:1.43.1-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158759</changelog>
</package>
<package pkgid="d23c48ac0b0bc93afd7c2c2a1e3e782b527449184e136c1ee9286b82b363a1e2" name="buildah-debugsource" arch="x86_64">
  <version epoch="2" ver="1.43.1" rel="3.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.1-1" date="1754913600">- update to https://github.com/containers/buildah/releases/tag/v1.41.1
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.3-1" date="1755518400">- update to https://github.com/containers/buildah/releases/tag/v1.41.3
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.4-1" date="1758024000">- update to https://github.com/containers/buildah/releases/tag/v1.41.4
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.8-1" date="1770206400">- update to https://github.com/containers/buildah/releases/tag/v1.41.8
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-1" date="1770638400">- update to https://github.com/containers/buildah/releases/tag/v1.43.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-61726
- Resolves: RHEL-146099</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-3" date="1775563200">- update to the latest content of https://github.com/containers/buildah/tree/release-1.43
  (https://github.com/containers/buildah/commit/bbc4bd1)
- Resolves: RHEL-95964</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-1" date="1776340800">- update to https://github.com/containers/buildah/releases/tag/v1.43.1
- fixes CVE-2026-34986
- Resolves: RHEL-165035</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 102:1.43.1-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158759</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-3" date="1783512000">- bump golang.org/x/crypto to v0.53.0 to fix CVE-2026-39832 and CVE-2026-39835
- Resolves: RHEL-188733 RHEL-190066</changelog>
</package>
<package pkgid="606e3b6b00560445ae4cedcd62ea8c658d65d2794d6b6acf0fe07a930013b825" name="buildah-debugsource" arch="x86_64">
  <version epoch="2" ver="1.43.1" rel="4.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.3-1" date="1755518400">- update to https://github.com/containers/buildah/releases/tag/v1.41.3
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.4-1" date="1758024000">- update to https://github.com/containers/buildah/releases/tag/v1.41.4
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.8-1" date="1770206400">- update to https://github.com/containers/buildah/releases/tag/v1.41.8
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-1" date="1770638400">- update to https://github.com/containers/buildah/releases/tag/v1.43.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-61726
- Resolves: RHEL-146099</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-3" date="1775563200">- update to the latest content of https://github.com/containers/buildah/tree/release-1.43
  (https://github.com/containers/buildah/commit/bbc4bd1)
- Resolves: RHEL-95964</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-1" date="1776340800">- update to https://github.com/containers/buildah/releases/tag/v1.43.1
- fixes CVE-2026-34986
- Resolves: RHEL-165035</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 102:1.43.1-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158759</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-3" date="1783512000">- bump golang.org/x/crypto to v0.53.0 to fix CVE-2026-39832 and CVE-2026-39835
- Resolves: RHEL-188733 RHEL-190066</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-4" date="1783684800">- rebuild for CVE-2026-39822
- Resolves: RHEL-193645</changelog>
</package>
<package pkgid="1c31240799c6fa3f567b549487a88c5450c1a6ff6717ea46126113a6c15ad00a" name="buildah-tests-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.43.1" rel="2.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.0-1" date="1753358400">- update to https://github.com/containers/buildah/releases/tag/v1.41.0
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.1-1" date="1754913600">- update to https://github.com/containers/buildah/releases/tag/v1.41.1
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.3-1" date="1755518400">- update to https://github.com/containers/buildah/releases/tag/v1.41.3
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.4-1" date="1758024000">- update to https://github.com/containers/buildah/releases/tag/v1.41.4
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.8-1" date="1770206400">- update to https://github.com/containers/buildah/releases/tag/v1.41.8
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-1" date="1770638400">- update to https://github.com/containers/buildah/releases/tag/v1.43.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-61726
- Resolves: RHEL-146099</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-3" date="1775563200">- update to the latest content of https://github.com/containers/buildah/tree/release-1.43
  (https://github.com/containers/buildah/commit/bbc4bd1)
- Resolves: RHEL-95964</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-1" date="1776340800">- update to https://github.com/containers/buildah/releases/tag/v1.43.1
- fixes CVE-2026-34986
- Resolves: RHEL-165035</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 102:1.43.1-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158759</changelog>
</package>
<package pkgid="4e096d0ec785a4c2857a371eaef3ff170a29b53a3c29fe6325de55172b20602a" name="buildah-tests-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.43.1" rel="3.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.1-1" date="1754913600">- update to https://github.com/containers/buildah/releases/tag/v1.41.1
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.3-1" date="1755518400">- update to https://github.com/containers/buildah/releases/tag/v1.41.3
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.4-1" date="1758024000">- update to https://github.com/containers/buildah/releases/tag/v1.41.4
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.8-1" date="1770206400">- update to https://github.com/containers/buildah/releases/tag/v1.41.8
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-1" date="1770638400">- update to https://github.com/containers/buildah/releases/tag/v1.43.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-61726
- Resolves: RHEL-146099</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-3" date="1775563200">- update to the latest content of https://github.com/containers/buildah/tree/release-1.43
  (https://github.com/containers/buildah/commit/bbc4bd1)
- Resolves: RHEL-95964</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-1" date="1776340800">- update to https://github.com/containers/buildah/releases/tag/v1.43.1
- fixes CVE-2026-34986
- Resolves: RHEL-165035</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 102:1.43.1-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158759</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-3" date="1783512000">- bump golang.org/x/crypto to v0.53.0 to fix CVE-2026-39832 and CVE-2026-39835
- Resolves: RHEL-188733 RHEL-190066</changelog>
</package>
<package pkgid="d85e98ae82dce82f08fda1c27d14a50477399a7406d64c043654a49da04290a3" name="buildah-tests-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.43.1" rel="4.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.3-1" date="1755518400">- update to https://github.com/containers/buildah/releases/tag/v1.41.3
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.4-1" date="1758024000">- update to https://github.com/containers/buildah/releases/tag/v1.41.4
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.8-1" date="1770206400">- update to https://github.com/containers/buildah/releases/tag/v1.41.8
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-1" date="1770638400">- update to https://github.com/containers/buildah/releases/tag/v1.43.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-61726
- Resolves: RHEL-146099</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-3" date="1775563200">- update to the latest content of https://github.com/containers/buildah/tree/release-1.43
  (https://github.com/containers/buildah/commit/bbc4bd1)
- Resolves: RHEL-95964</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-1" date="1776340800">- update to https://github.com/containers/buildah/releases/tag/v1.43.1
- fixes CVE-2026-34986
- Resolves: RHEL-165035</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 102:1.43.1-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158759</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-3" date="1783512000">- bump golang.org/x/crypto to v0.53.0 to fix CVE-2026-39832 and CVE-2026-39835
- Resolves: RHEL-188733 RHEL-190066</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-4" date="1783684800">- rebuild for CVE-2026-39822
- Resolves: RHEL-193645</changelog>
</package>
<package pkgid="7d8966aaf6fd15e3502ea041ed122531077b03d8268109bafdbbfc7673485f24" name="bzip2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="11.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-9" date="1728043200">- Fix out of bounds access in BZ2_decompress
Resolves: RHEL-65198</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-10" date="1734609600">- Revert the previous commit (introduced a regression)
Resolves: CVE-2019-12900</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-11" date="1767960000">- Add the explicit Rquires to the base package
Resolves: RHEL-138675</changelog>
</package>
<package pkgid="7735d84808a07236a0eb9c614096e94dc41ba8563c79291b074a73230b8b3c34" name="bzip2-libs-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.8" rel="11.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-9" date="1728043200">- Fix out of bounds access in BZ2_decompress
Resolves: RHEL-65198</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-10" date="1734609600">- Revert the previous commit (introduced a regression)
Resolves: CVE-2019-12900</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-11" date="1767960000">- Add the explicit Rquires to the base package
Resolves: RHEL-138675</changelog>
</package>
<package pkgid="10222583258a1e3deed8070f4a5a0604b9602fa90b4edeb53a4fd67f2e20f78d" name="bzip2-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="11.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-9" date="1728043200">- Fix out of bounds access in BZ2_decompress
Resolves: RHEL-65198</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-10" date="1734609600">- Revert the previous commit (introduced a regression)
Resolves: CVE-2019-12900</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-11" date="1767960000">- Add the explicit Rquires to the base package
Resolves: RHEL-138675</changelog>
</package>
<package pkgid="ed5a8ef0aa6bdc58db0afc460fc286c1ed35c8068a0a1d7c2a0d1abc91f4964e" name="capstone-debuginfo" arch="i686">
  <version epoch="0" ver="4.0.2" rel="13.el9_8"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 4.0.2-11" date="1773316800">- Fix CVE-2025-68114 (memory corruption) and CVE-2025-67873 (heap buffer overflow)
  Resolves: RHEL-137760</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 4.0.2-12" date="1775131200">- Rebuild for rhel-9.8
  Resolves: RHEL-137760</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 4.0.2-13" date="1779796800">- Rebuild for rhel-9.8.z</changelog>
</package>
<package pkgid="17ec00aef8bda81e0f541f87f6e7569f4435818433fbde81e1fecf06d806d648" name="capstone-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="13.el9_8"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 4.0.2-11" date="1773316800">- Fix CVE-2025-68114 (memory corruption) and CVE-2025-67873 (heap buffer overflow)
  Resolves: RHEL-137760</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 4.0.2-12" date="1775131200">- Rebuild for rhel-9.8
  Resolves: RHEL-137760</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 4.0.2-13" date="1779796800">- Rebuild for rhel-9.8.z</changelog>
</package>
<package pkgid="60256daba5adcaab3cb18cdf83cacf31256d4e4be5ca3bd45584ea0231f3ef85" name="capstone-debugsource" arch="i686">
  <version epoch="0" ver="4.0.2" rel="13.el9_8"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 4.0.2-11" date="1773316800">- Fix CVE-2025-68114 (memory corruption) and CVE-2025-67873 (heap buffer overflow)
  Resolves: RHEL-137760</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 4.0.2-12" date="1775131200">- Rebuild for rhel-9.8
  Resolves: RHEL-137760</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 4.0.2-13" date="1779796800">- Rebuild for rhel-9.8.z</changelog>
</package>
<package pkgid="be14a153fd8e6cbeff5defaf65ac37ce0e8e41fd61b1d3dacce7bb4d0e9d9e6a" name="capstone-debugsource" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="13.el9_8"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 4.0.2-11" date="1773316800">- Fix CVE-2025-68114 (memory corruption) and CVE-2025-67873 (heap buffer overflow)
  Resolves: RHEL-137760</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 4.0.2-12" date="1775131200">- Rebuild for rhel-9.8
  Resolves: RHEL-137760</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 4.0.2-13" date="1779796800">- Rebuild for rhel-9.8.z</changelog>
</package>
<package pkgid="d2efcb605aecc2ede892e9fe7cb1bce4cc4c36475f08d0c340cbfc7b561a9f14" name="cifs-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.6" rel="2.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-1" date="1728388800">- resolves: RHEL-61732 - Update to version 7.1</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-2" date="1728475200">- Fix damaged test filename</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.2-1" date="1741348800">- resolves: RHEL-82680 - Update to version 7.2</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.4-1" date="1764158400">- resolves: RHEL-110765 - fix regression with cifscreds(1)</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.5-1" date="1770120000">- resolves: RHEL-127499 - Enable debug logs in cifs.upcall</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.6-1" date="1782302400">- Update to version 7.6
- resolves: RHEL-185761 - CVE-2026-12505 cifs-utils: LPE via cifs.spnego</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.6-2" date="1783425600">- resolves: RHEL-192982 - fix krb5 mount regression</changelog>
</package>
<package pkgid="890afa61de9c476141719e4d9c5d6b6f424efd7435250db5dcfc4d1d5cb934dc" name="cifs-utils-debugsource" arch="i686">
  <version epoch="0" ver="7.6" rel="2.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-1" date="1728388800">- resolves: RHEL-61732 - Update to version 7.1</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-2" date="1728475200">- Fix damaged test filename</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.2-1" date="1741348800">- resolves: RHEL-82680 - Update to version 7.2</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.4-1" date="1764158400">- resolves: RHEL-110765 - fix regression with cifscreds(1)</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.5-1" date="1770120000">- resolves: RHEL-127499 - Enable debug logs in cifs.upcall</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.6-1" date="1782302400">- Update to version 7.6
- resolves: RHEL-185761 - CVE-2026-12505 cifs-utils: LPE via cifs.spnego</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.6-2" date="1783425600">- resolves: RHEL-192982 - fix krb5 mount regression</changelog>
</package>
<package pkgid="def2ba25b3f858325e5ad22c652e5661c64c44b8ef912984acb882517656964f" name="cifs-utils-debugsource" arch="x86_64">
  <version epoch="0" ver="7.6" rel="2.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-1" date="1728388800">- resolves: RHEL-61732 - Update to version 7.1</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-2" date="1728475200">- Fix damaged test filename</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.2-1" date="1741348800">- resolves: RHEL-82680 - Update to version 7.2</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.4-1" date="1764158400">- resolves: RHEL-110765 - fix regression with cifscreds(1)</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.5-1" date="1770120000">- resolves: RHEL-127499 - Enable debug logs in cifs.upcall</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.6-1" date="1782302400">- Update to version 7.6
- resolves: RHEL-185761 - CVE-2026-12505 cifs-utils: LPE via cifs.spnego</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.6-2" date="1783425600">- resolves: RHEL-192982 - fix krb5 mount regression</changelog>
</package>
<package pkgid="c15cff5bce4082b4f7e10df09eb291ffd3025f18dc10bffbcfc34842b861489a" name="compat-openssl11-debuginfo" arch="i686">
  <version epoch="1" ver="1.1.1k" rel="5.el9_8.3"/>
  <changelog author="Petr Hybl &lt;phybl@redhat.com&gt; - 1:1.1.1k-5.1" date="1746792000">- Fixes cve-2023-0286 X.400 address type confusion in X.509 GeneralName
  Resolves: RHEL-88969</changelog>
  <changelog author="Petr Hybl &lt;phybl@redhat.com&gt; - 1:1.1.1k-5.2" date="1775044800">- Fixes CVE-2025-69419 OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
  Resolves: RHEL-142723</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:1.1.1k-5.3" date="1778673600">- Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
  Resolves: RHEL-165863</changelog>
</package>
<package pkgid="562b42bcff83fce7e31a2cbe672f5a188ed42e84f068d5d8eb5a28879509e366" name="compat-openssl11-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.1.1k" rel="5.el9_8.3"/>
  <changelog author="Petr Hybl &lt;phybl@redhat.com&gt; - 1:1.1.1k-5.1" date="1746792000">- Fixes cve-2023-0286 X.400 address type confusion in X.509 GeneralName
  Resolves: RHEL-88969</changelog>
  <changelog author="Petr Hybl &lt;phybl@redhat.com&gt; - 1:1.1.1k-5.2" date="1775044800">- Fixes CVE-2025-69419 OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
  Resolves: RHEL-142723</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:1.1.1k-5.3" date="1778673600">- Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
  Resolves: RHEL-165863</changelog>
</package>
<package pkgid="ffff35f06db09797f20d853ce955c5a22b19f42cf24fdb13815d9ad1a7f0a3db" name="compat-openssl11-debuginfo" arch="i686">
  <version epoch="1" ver="1.1.1k" rel="5.el9_8.4"/>
  <changelog author="Petr Hybl &lt;phybl@redhat.com&gt; - 1:1.1.1k-5.1" date="1746792000">- Fixes cve-2023-0286 X.400 address type confusion in X.509 GeneralName
  Resolves: RHEL-88969</changelog>
  <changelog author="Petr Hybl &lt;phybl@redhat.com&gt; - 1:1.1.1k-5.2" date="1775044800">- Fixes CVE-2025-69419 OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
  Resolves: RHEL-142723</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:1.1.1k-5.3" date="1778673600">- Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
  Resolves: RHEL-165863</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 1:1.1.1k-5.4" date="1782475200">- Fixes CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify()</changelog>
</package>
<package pkgid="a7e75b7974b3c038f097736c76996f94541e31cf7499c10a61b28ead87bacb53" name="compat-openssl11-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.1.1k" rel="5.el9_8.4"/>
  <changelog author="Petr Hybl &lt;phybl@redhat.com&gt; - 1:1.1.1k-5.1" date="1746792000">- Fixes cve-2023-0286 X.400 address type confusion in X.509 GeneralName
  Resolves: RHEL-88969</changelog>
  <changelog author="Petr Hybl &lt;phybl@redhat.com&gt; - 1:1.1.1k-5.2" date="1775044800">- Fixes CVE-2025-69419 OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
  Resolves: RHEL-142723</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:1.1.1k-5.3" date="1778673600">- Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
  Resolves: RHEL-165863</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 1:1.1.1k-5.4" date="1782475200">- Fixes CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify()</changelog>
</package>
<package pkgid="69577703ac95c0b8891dfa283006cadd2a46d2cd455b418efcc63af181f3132e" name="compat-openssl11-debugsource" arch="i686">
  <version epoch="1" ver="1.1.1k" rel="5.el9_8.3"/>
  <changelog author="Petr Hybl &lt;phybl@redhat.com&gt; - 1:1.1.1k-5.1" date="1746792000">- Fixes cve-2023-0286 X.400 address type confusion in X.509 GeneralName
  Resolves: RHEL-88969</changelog>
  <changelog author="Petr Hybl &lt;phybl@redhat.com&gt; - 1:1.1.1k-5.2" date="1775044800">- Fixes CVE-2025-69419 OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
  Resolves: RHEL-142723</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:1.1.1k-5.3" date="1778673600">- Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
  Resolves: RHEL-165863</changelog>
</package>
<package pkgid="3cd6076ba1903bc2045f6f9530db54725f8959529eaaa1b79f521490966d7f88" name="compat-openssl11-debugsource" arch="x86_64">
  <version epoch="1" ver="1.1.1k" rel="5.el9_8.3"/>
  <changelog author="Petr Hybl &lt;phybl@redhat.com&gt; - 1:1.1.1k-5.1" date="1746792000">- Fixes cve-2023-0286 X.400 address type confusion in X.509 GeneralName
  Resolves: RHEL-88969</changelog>
  <changelog author="Petr Hybl &lt;phybl@redhat.com&gt; - 1:1.1.1k-5.2" date="1775044800">- Fixes CVE-2025-69419 OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
  Resolves: RHEL-142723</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:1.1.1k-5.3" date="1778673600">- Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
  Resolves: RHEL-165863</changelog>
</package>
<package pkgid="13e8994e8664659e431fb262b9dfe051e8611f9254ae90837c8008527648eb1f" name="compat-openssl11-debugsource" arch="i686">
  <version epoch="1" ver="1.1.1k" rel="5.el9_8.4"/>
  <changelog author="Petr Hybl &lt;phybl@redhat.com&gt; - 1:1.1.1k-5.1" date="1746792000">- Fixes cve-2023-0286 X.400 address type confusion in X.509 GeneralName
  Resolves: RHEL-88969</changelog>
  <changelog author="Petr Hybl &lt;phybl@redhat.com&gt; - 1:1.1.1k-5.2" date="1775044800">- Fixes CVE-2025-69419 OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
  Resolves: RHEL-142723</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:1.1.1k-5.3" date="1778673600">- Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
  Resolves: RHEL-165863</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 1:1.1.1k-5.4" date="1782475200">- Fixes CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify()</changelog>
</package>
<package pkgid="9e2e25b3f0441e12b2d382c56f36a0d640e89938c80d1b982cc8e858b6aa8ed5" name="compat-openssl11-debugsource" arch="x86_64">
  <version epoch="1" ver="1.1.1k" rel="5.el9_8.4"/>
  <changelog author="Petr Hybl &lt;phybl@redhat.com&gt; - 1:1.1.1k-5.1" date="1746792000">- Fixes cve-2023-0286 X.400 address type confusion in X.509 GeneralName
  Resolves: RHEL-88969</changelog>
  <changelog author="Petr Hybl &lt;phybl@redhat.com&gt; - 1:1.1.1k-5.2" date="1775044800">- Fixes CVE-2025-69419 OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
  Resolves: RHEL-142723</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:1.1.1k-5.3" date="1778673600">- Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
  Resolves: RHEL-165863</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 1:1.1.1k-5.4" date="1782475200">- Fixes CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify()</changelog>
</package>
<package pkgid="12deef914a95b717f1c5ff338429eb44959479c7a2f1e6f4d49edaf334d9a440" name="conmon-debuginfo" arch="x86_64">
  <version epoch="3" ver="2.2.1" rel="2.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 3:2.1.13-1" date="1740571200">- update to https://github.com/containers/conmon/releases/tag/v2.1.13
- Resolves: RHEL-80820</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 3:2.2.0-2" date="1770292800">- update to https://github.com/containers/conmon/releases/tag/v2.2.0
- Resolves: RHEL-147114</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 3:2.2.1-1" date="1770897600">- update to https://github.com/containers/conmon/releases/tag/v2.2.1
- enable RELRO
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 3:2.2.1-2" date="1781524800">- reset create_pid after waitpid to prevent signaling unrelated processes
- Resolves: RHEL-180615</changelog>
</package>
<package pkgid="07efcc0b585e5ae26a8565424801f42b4e65acc354debb9acefe8319b89d3f22" name="conmon-debugsource" arch="x86_64">
  <version epoch="3" ver="2.2.1" rel="2.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 3:2.1.13-1" date="1740571200">- update to https://github.com/containers/conmon/releases/tag/v2.1.13
- Resolves: RHEL-80820</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 3:2.2.0-2" date="1770292800">- update to https://github.com/containers/conmon/releases/tag/v2.2.0
- Resolves: RHEL-147114</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 3:2.2.1-1" date="1770897600">- update to https://github.com/containers/conmon/releases/tag/v2.2.1
- enable RELRO
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 3:2.2.1-2" date="1781524800">- reset create_pid after waitpid to prevent signaling unrelated processes
- Resolves: RHEL-180615</changelog>
</package>
<package pkgid="bda49b6e0fd847105b172ddf2aa6922c973e3b569fa0a436aed2044c2b1b9929" name="containernetworking-plugins-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.9.0" rel="3.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.5.1-2" date="1724155200">- rebuild for CVE-2024-24791
- Resolves: RHEL-47166</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.6.0-1" date="1732708800">- update to https://github.com/containernetworking/plugins/releases/tag/v1.6.0
- Related: RHEL-60277</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.6.1-1" date="1733227200">- update to https://github.com/containernetworking/plugins/releases/tag/v1.6.1
- Related: RHEL-60277</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.6.2-1" date="1736510400">- update to https://github.com/containernetworking/plugins/releases/tag/v1.6.2
- Related: RHEL-60277</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.7.1-1" date="1746187200">- update to https://github.com/containernetworking/plugins/releases/tag/v1.7.1
- Resolves: RHEL-89428</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.7.1-2" date="1749643200">- rebuild for CVE-2025-22871
- Resolves: RHEL-90030</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.8.0-1" date="1758024000">- update to https://github.com/containernetworking/plugins/releases/tag/v1.8.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.9.0-1" date="1770206400">- update to https://github.com/containernetworking/plugins/releases/tag/v1.9.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.9.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-61726
- Resolves: RHEL-146101</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.9.0-3" date="1777982400">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158763</changelog>
</package>
<package pkgid="355fc3242f314b4aa5009e85f3ed0865ca6ced00603d774743563f4ef79a97ca" name="containernetworking-plugins-debugsource" arch="x86_64">
  <version epoch="1" ver="1.9.0" rel="3.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.5.1-2" date="1724155200">- rebuild for CVE-2024-24791
- Resolves: RHEL-47166</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.6.0-1" date="1732708800">- update to https://github.com/containernetworking/plugins/releases/tag/v1.6.0
- Related: RHEL-60277</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.6.1-1" date="1733227200">- update to https://github.com/containernetworking/plugins/releases/tag/v1.6.1
- Related: RHEL-60277</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.6.2-1" date="1736510400">- update to https://github.com/containernetworking/plugins/releases/tag/v1.6.2
- Related: RHEL-60277</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.7.1-1" date="1746187200">- update to https://github.com/containernetworking/plugins/releases/tag/v1.7.1
- Resolves: RHEL-89428</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.7.1-2" date="1749643200">- rebuild for CVE-2025-22871
- Resolves: RHEL-90030</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.8.0-1" date="1758024000">- update to https://github.com/containernetworking/plugins/releases/tag/v1.8.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.9.0-1" date="1770206400">- update to https://github.com/containernetworking/plugins/releases/tag/v1.9.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.9.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-61726
- Resolves: RHEL-146101</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.9.0-3" date="1777982400">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158763</changelog>
</package>
<package pkgid="6d03237b3623bffbd867511d691d0115f013d621f08c3df9d4ea65a230ebc98d" name="coreutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.32" rel="40.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-35" date="1706529600">- fix tail on kernels with 64k page sizes (RHEL-22866)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-36" date="1723809600">- fix fold exit code for non-existent files (RHEL-54568)
- enable LTO on ppc64le</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-37" date="1729598400">- fix extended upstream test suite failures (RHEL-60290)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-38" date="1732622400">- fix affinity mask handling in nproc for large CPU counts (RHEL-54139)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-39" date="1733745600">- fix sort fdlimit test failures on s390x with /dev/z90crypt (RHEL-60290)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-40" date="1768478400">- fold: fix processing of malformed UTF-8 sequences (RHEL-136086)</changelog>
</package>
<package pkgid="addc307d613793b73a3b7d7b3ea4bb297b16750b3b171ef5946fd0e13eecf2d5" name="coreutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.32" rel="41.el9_8"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-36" date="1723809600">- fix fold exit code for non-existent files (RHEL-54568)
- enable LTO on ppc64le</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-37" date="1729598400">- fix extended upstream test suite failures (RHEL-60290)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-38" date="1732622400">- fix affinity mask handling in nproc for large CPU counts (RHEL-54139)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-39" date="1733745600">- fix sort fdlimit test failures on s390x with /dev/z90crypt (RHEL-60290)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-40" date="1768478400">- fold: fix processing of malformed UTF-8 sequences (RHEL-136086)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-8" date="1780315200">- CVE-2025-5278 - Fix Heap Buffer Under-Read in sort via Key Specification (RHEL-180331)</changelog>
</package>
<package pkgid="a61563dc74d8b0717d68c2a3cb496c6670de8c37c164e7236eee67b511e7dbc3" name="coreutils-debugsource" arch="x86_64">
  <version epoch="0" ver="8.32" rel="40.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-35" date="1706529600">- fix tail on kernels with 64k page sizes (RHEL-22866)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-36" date="1723809600">- fix fold exit code for non-existent files (RHEL-54568)
- enable LTO on ppc64le</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-37" date="1729598400">- fix extended upstream test suite failures (RHEL-60290)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-38" date="1732622400">- fix affinity mask handling in nproc for large CPU counts (RHEL-54139)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-39" date="1733745600">- fix sort fdlimit test failures on s390x with /dev/z90crypt (RHEL-60290)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-40" date="1768478400">- fold: fix processing of malformed UTF-8 sequences (RHEL-136086)</changelog>
</package>
<package pkgid="4da864228214a12c9736445971d3efbb4b3a73c0a40619e7560103301bdc4f38" name="coreutils-debugsource" arch="x86_64">
  <version epoch="0" ver="8.32" rel="41.el9_8"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-36" date="1723809600">- fix fold exit code for non-existent files (RHEL-54568)
- enable LTO on ppc64le</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-37" date="1729598400">- fix extended upstream test suite failures (RHEL-60290)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-38" date="1732622400">- fix affinity mask handling in nproc for large CPU counts (RHEL-54139)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-39" date="1733745600">- fix sort fdlimit test failures on s390x with /dev/z90crypt (RHEL-60290)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-40" date="1768478400">- fold: fix processing of malformed UTF-8 sequences (RHEL-136086)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-8" date="1780315200">- CVE-2025-5278 - Fix Heap Buffer Under-Read in sort via Key Specification (RHEL-180331)</changelog>
</package>
<package pkgid="3b4b32bd02c3e01743bbdef02934788dd286febe267cae029f89852965c98609" name="coreutils-single-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.32" rel="40.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-35" date="1706529600">- fix tail on kernels with 64k page sizes (RHEL-22866)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-36" date="1723809600">- fix fold exit code for non-existent files (RHEL-54568)
- enable LTO on ppc64le</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-37" date="1729598400">- fix extended upstream test suite failures (RHEL-60290)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-38" date="1732622400">- fix affinity mask handling in nproc for large CPU counts (RHEL-54139)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-39" date="1733745600">- fix sort fdlimit test failures on s390x with /dev/z90crypt (RHEL-60290)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-40" date="1768478400">- fold: fix processing of malformed UTF-8 sequences (RHEL-136086)</changelog>
</package>
<package pkgid="68b35bbe19b4f0daaf4f2d84b14b2d664dd4891ad97439e3627ca90b4b59db1a" name="coreutils-single-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.32" rel="41.el9_8"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-36" date="1723809600">- fix fold exit code for non-existent files (RHEL-54568)
- enable LTO on ppc64le</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-37" date="1729598400">- fix extended upstream test suite failures (RHEL-60290)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-38" date="1732622400">- fix affinity mask handling in nproc for large CPU counts (RHEL-54139)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-39" date="1733745600">- fix sort fdlimit test failures on s390x with /dev/z90crypt (RHEL-60290)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 8.32-40" date="1768478400">- fold: fix processing of malformed UTF-8 sequences (RHEL-136086)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-8" date="1780315200">- CVE-2025-5278 - Fix Heap Buffer Under-Read in sort via Key Specification (RHEL-180331)</changelog>
</package>
<package pkgid="ef85e3836e5533eaa57eb7e9dd34f9bd96ce1966edee820120ca61692f9c8b76" name="corosync-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.10" rel="1.el9_8.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.1.8-2" date="1716292800">- Resolves: RHEL-24163

- Report crypto errors back to cfg reload (RHEL-24163)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.1.9-1" date="1731672000">- Resolves: RHEL-65699

- New upstream release (RHEL-65699)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.1.9-2" date="1742990400">- Resolves: RHEL-84616

- totemsrp: Check size of orf_token msg (fixes CVE-2025-30472)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.1.10-1" date="1763467200">- Resolves: RHEL-122942

- New upstream release (RHEL-122942)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.1.10-1.1" date="1775736000">- Resolves: RHEL-163816
- Resolves: RHEL-163837

- totemsrp: Return error if sanity check fails (fixes CVE-2026-35091)
- totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092)</changelog>
</package>
<package pkgid="58db13d865d27cfe4743b3fd6ae7fd3533aa9a7ea2b5041312f152adaf1c6ac1" name="corosync-qdevice-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="1.el9"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.0.2-3" date="1739880000">- Resolves: RHEL-7637

- Add support for sysusers.d functionality (RHEL-7637)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.0.4-1" date="1764072000">- Resolves: RHEL-123650
- Resolves: RHEL-67471

- New upstream release (RHEL-123650)
- Support for running corosync-qnetd-tool and corosync-qdevice-tool
  as a non-root user (RHEL-67471)</changelog>
</package>
<package pkgid="889c7a98db575b9da3c011bdb93522d47a61fb747b6596028e3cd8933fc85794" name="corosync-qdevice-debugsource" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="1.el9"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.0.2-3" date="1739880000">- Resolves: RHEL-7637

- Add support for sysusers.d functionality (RHEL-7637)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.0.4-1" date="1764072000">- Resolves: RHEL-123650
- Resolves: RHEL-67471

- New upstream release (RHEL-123650)
- Support for running corosync-qnetd-tool and corosync-qdevice-tool
  as a non-root user (RHEL-67471)</changelog>
</package>
<package pkgid="1d09c84c17b2729913dd95b165af4fe039cd41f2d54f0f0af3fd863d98820eb6" name="corosync-qnetd-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="1.el9"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.0.2-3" date="1739880000">- Resolves: RHEL-7637

- Add support for sysusers.d functionality (RHEL-7637)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.0.4-1" date="1764072000">- Resolves: RHEL-123650
- Resolves: RHEL-67471

- New upstream release (RHEL-123650)
- Support for running corosync-qnetd-tool and corosync-qdevice-tool
  as a non-root user (RHEL-67471)</changelog>
</package>
<package pkgid="48c1a10c4a5c3244841c61260f1948e3da8f9abe7a897e154d3188930a376587" name="cracklib-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.6" rel="28.el9"/>
  <changelog author="Ganna Starovoytova &lt;gstarovo@redhat.com&gt; 2.9.6-28" date="1768478400">- update URL (RHEL-5215)</changelog>
</package>
<package pkgid="613f4153565dc4e8e63e71727ea95a0ee92652d369f7583a422a375f614fb425" name="cracklib-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.6" rel="28.el9"/>
  <changelog author="Ganna Starovoytova &lt;gstarovo@redhat.com&gt; 2.9.6-28" date="1768478400">- update URL (RHEL-5215)</changelog>
</package>
<package pkgid="1350c030b0e1a885cbc440bf1a564166bb0725fdefa00edf0f8d70b6c8bee4ca" name="cronie-anacron-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.7" rel="16.el9"/>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-12" date="1727352000">- Add `increase_max_crontabs.patch`
- Resolves: RHEL-60279</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-13" date="1733918400">- Create anacron timestamp files with correct permissions
- Resolves: RHEL-5376</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-14" date="1744372800">- Rename variables in get_range()
- Step size out fo bound handling 
- Fix range parsing
- Resolves: RHEL-82795</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-15" date="1747224000">- Move parsing code before separator check
- Related: RHEL-82795</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-16" date="1765972800">- Forward XDG_SESSION_CLASS to PAM for session classification
- Also use systemd_tmpfiles to create files in /var, to ensure Cronie
- works properly in Image mode
- Resolves: RHEL-131190, RHEL-136491, RHEL-136492</changelog>
</package>
<package pkgid="98019a9e392bb4df52a76cabbf1100911c848b803b0896367b80b4b269134a15" name="cronie-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.7" rel="16.el9"/>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-12" date="1727352000">- Add `increase_max_crontabs.patch`
- Resolves: RHEL-60279</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-13" date="1733918400">- Create anacron timestamp files with correct permissions
- Resolves: RHEL-5376</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-14" date="1744372800">- Rename variables in get_range()
- Step size out fo bound handling 
- Fix range parsing
- Resolves: RHEL-82795</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-15" date="1747224000">- Move parsing code before separator check
- Related: RHEL-82795</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-16" date="1765972800">- Forward XDG_SESSION_CLASS to PAM for session classification
- Also use systemd_tmpfiles to create files in /var, to ensure Cronie
- works properly in Image mode
- Resolves: RHEL-131190, RHEL-136491, RHEL-136492</changelog>
</package>
<package pkgid="85704f69184d4fb6adffabe84e877174d712b2a256b388dbd90f874273f53de8" name="cronie-debugsource" arch="x86_64">
  <version epoch="0" ver="1.5.7" rel="16.el9"/>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-12" date="1727352000">- Add `increase_max_crontabs.patch`
- Resolves: RHEL-60279</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-13" date="1733918400">- Create anacron timestamp files with correct permissions
- Resolves: RHEL-5376</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-14" date="1744372800">- Rename variables in get_range()
- Step size out fo bound handling 
- Fix range parsing
- Resolves: RHEL-82795</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-15" date="1747224000">- Move parsing code before separator check
- Related: RHEL-82795</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.5.7-16" date="1765972800">- Forward XDG_SESSION_CLASS to PAM for session classification
- Also use systemd_tmpfiles to create files in /var, to ensure Cronie
- works properly in Image mode
- Resolves: RHEL-131190, RHEL-136491, RHEL-136492</changelog>
</package>
<package pkgid="4031561f533541429cfedd295bb3f04fac9e1549b09e4f1a4192b33308cfb8aa" name="cryptsetup-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="3.el9"/>
  <changelog author="Daniel Zatovic &lt;dzatovic@redhat.com&gt; - 2.7.2-1" date="1714651200">- Update to cryptsetup 2.7.2
- Use OpenSLL Argon implementation instead of the built-in one
- Resolves: RHEL-32377</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-2" date="1724932800">- patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
- patch: Enable Argon2 in FIPS with openssl backend.
- patch: Abort online reencryption for misconfigured devices.
- patch: Harden online reencryption checks in initialization phase.
- patch: Fix detection of direct-io with suspended devices.
- patch: Return suspended status also for unknow target types.
- patch: Do not handle device as suspended on error.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-3" date="1725278400">- Specbump for correct target release.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-4" date="1749038400">- patch: Ignore unknown VMK entry 24 in bitlk metadata.
- Resolves: RHEL-94860</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-1" date="1756900800">- Update to cryptsetup 2.8.1.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-2" date="1757678400">- patch: Improve check for a function attribute support.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-3" date="1766059200">- patch: Read integrity profile info from top level device.
- patch: Fix possible use of uninitialized variable.
- patch: Reinstate pbkdf serialization flag in device activation.
- patch: Fix LUKS2 device status in inline HW mode and detached header.
- patch: Set inline integrity flag if no underlying dm-integrity device.
- patch: Fix wrong device size status reports in cryptsetup and integritysetup.
- Resolves: RHEL-122297 RHEL-125152 RHEL-125167 RHEL-132585 RHEL-140106</changelog>
</package>
<package pkgid="d36603c87063dccb72444c4c70a3f99bb4318f0f2aa1ee28ba64fdf14a71b25d" name="cryptsetup-libs-debuginfo" arch="i686">
  <version epoch="0" ver="2.8.1" rel="3.el9"/>
  <changelog author="Daniel Zatovic &lt;dzatovic@redhat.com&gt; - 2.7.2-1" date="1714651200">- Update to cryptsetup 2.7.2
- Use OpenSLL Argon implementation instead of the built-in one
- Resolves: RHEL-32377</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-2" date="1724932800">- patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
- patch: Enable Argon2 in FIPS with openssl backend.
- patch: Abort online reencryption for misconfigured devices.
- patch: Harden online reencryption checks in initialization phase.
- patch: Fix detection of direct-io with suspended devices.
- patch: Return suspended status also for unknow target types.
- patch: Do not handle device as suspended on error.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-3" date="1725278400">- Specbump for correct target release.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-4" date="1749038400">- patch: Ignore unknown VMK entry 24 in bitlk metadata.
- Resolves: RHEL-94860</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-1" date="1756900800">- Update to cryptsetup 2.8.1.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-2" date="1757678400">- patch: Improve check for a function attribute support.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-3" date="1766059200">- patch: Read integrity profile info from top level device.
- patch: Fix possible use of uninitialized variable.
- patch: Reinstate pbkdf serialization flag in device activation.
- patch: Fix LUKS2 device status in inline HW mode and detached header.
- patch: Set inline integrity flag if no underlying dm-integrity device.
- patch: Fix wrong device size status reports in cryptsetup and integritysetup.
- Resolves: RHEL-122297 RHEL-125152 RHEL-125167 RHEL-132585 RHEL-140106</changelog>
</package>
<package pkgid="f17833400a6ad9051ad0a1c6eb88957171c5928f06ae735669637579ce9a01cc" name="cryptsetup-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="3.el9"/>
  <changelog author="Daniel Zatovic &lt;dzatovic@redhat.com&gt; - 2.7.2-1" date="1714651200">- Update to cryptsetup 2.7.2
- Use OpenSLL Argon implementation instead of the built-in one
- Resolves: RHEL-32377</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-2" date="1724932800">- patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
- patch: Enable Argon2 in FIPS with openssl backend.
- patch: Abort online reencryption for misconfigured devices.
- patch: Harden online reencryption checks in initialization phase.
- patch: Fix detection of direct-io with suspended devices.
- patch: Return suspended status also for unknow target types.
- patch: Do not handle device as suspended on error.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-3" date="1725278400">- Specbump for correct target release.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-4" date="1749038400">- patch: Ignore unknown VMK entry 24 in bitlk metadata.
- Resolves: RHEL-94860</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-1" date="1756900800">- Update to cryptsetup 2.8.1.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-2" date="1757678400">- patch: Improve check for a function attribute support.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-3" date="1766059200">- patch: Read integrity profile info from top level device.
- patch: Fix possible use of uninitialized variable.
- patch: Reinstate pbkdf serialization flag in device activation.
- patch: Fix LUKS2 device status in inline HW mode and detached header.
- patch: Set inline integrity flag if no underlying dm-integrity device.
- patch: Fix wrong device size status reports in cryptsetup and integritysetup.
- Resolves: RHEL-122297 RHEL-125152 RHEL-125167 RHEL-132585 RHEL-140106</changelog>
</package>
<package pkgid="bb111156fd0474185150421656a7bf23bf44bc74eab672a04e4e2ab7d588aaa1" name="ctdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="90f37a13c84224260eb9c860ee4b154f31d1a3c8ab3aab48795d1d1c2b7371c5" name="cups-client-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.3.3op2" rel="39.el9_8"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-30" date="1723723200">- RHEL-6526 cups source rpm doesn't actually build lspp support
- fix memory leaks from LSPP</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-31" date="1727784000">- RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-32" date="1733745600">- RHEL-68414 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-33" date="1736337600">- Add NoSystem SSLOptions value</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-34" date="1757592000">- RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-35" date="1759406400">- RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-36" date="1763467200">- RHEL-122629 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-37" date="1765540800">- RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-38" date="1773057600">- RHEL-147214 - endless poll loop in http_write when POLLHUP is returned</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.3op2-39" date="1782129600">- RHEL-177957 CVE-2026-34980 cups: control character injection in option values</changelog>
</package>
<package pkgid="7e4e61ddd87d32a0254a2cbf462101fbaa840fe63d899e5aa0e954163aea3581" name="cups-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.3.3op2" rel="39.el9_8"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-30" date="1723723200">- RHEL-6526 cups source rpm doesn't actually build lspp support
- fix memory leaks from LSPP</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-31" date="1727784000">- RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-32" date="1733745600">- RHEL-68414 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-33" date="1736337600">- Add NoSystem SSLOptions value</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-34" date="1757592000">- RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-35" date="1759406400">- RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-36" date="1763467200">- RHEL-122629 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-37" date="1765540800">- RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-38" date="1773057600">- RHEL-147214 - endless poll loop in http_write when POLLHUP is returned</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.3op2-39" date="1782129600">- RHEL-177957 CVE-2026-34980 cups: control character injection in option values</changelog>
</package>
<package pkgid="c268da0c466d4b291fb5f2963f73861575a452f1b9c51eec1a2d6fd01d8ccf1f" name="cups-debugsource" arch="i686">
  <version epoch="1" ver="2.3.3op2" rel="39.el9_8"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-30" date="1723723200">- RHEL-6526 cups source rpm doesn't actually build lspp support
- fix memory leaks from LSPP</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-31" date="1727784000">- RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-32" date="1733745600">- RHEL-68414 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-33" date="1736337600">- Add NoSystem SSLOptions value</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-34" date="1757592000">- RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-35" date="1759406400">- RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-36" date="1763467200">- RHEL-122629 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-37" date="1765540800">- RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-38" date="1773057600">- RHEL-147214 - endless poll loop in http_write when POLLHUP is returned</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.3op2-39" date="1782129600">- RHEL-177957 CVE-2026-34980 cups: control character injection in option values</changelog>
</package>
<package pkgid="f6da86a6005e01b0586076625f0e08d47433d66fba28be614aa8d6ae370d3a46" name="cups-debugsource" arch="x86_64">
  <version epoch="1" ver="2.3.3op2" rel="39.el9_8"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-30" date="1723723200">- RHEL-6526 cups source rpm doesn't actually build lspp support
- fix memory leaks from LSPP</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-31" date="1727784000">- RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-32" date="1733745600">- RHEL-68414 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-33" date="1736337600">- Add NoSystem SSLOptions value</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-34" date="1757592000">- RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-35" date="1759406400">- RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-36" date="1763467200">- RHEL-122629 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-37" date="1765540800">- RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-38" date="1773057600">- RHEL-147214 - endless poll loop in http_write when POLLHUP is returned</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.3op2-39" date="1782129600">- RHEL-177957 CVE-2026-34980 cups: control character injection in option values</changelog>
</package>
<package pkgid="62aad4551318c5c49938a6e4c1a5b197279819e183defd3cbf5edd8b50cf589f" name="cups-ipptool-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.3.3op2" rel="39.el9_8"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-30" date="1723723200">- RHEL-6526 cups source rpm doesn't actually build lspp support
- fix memory leaks from LSPP</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-31" date="1727784000">- RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-32" date="1733745600">- RHEL-68414 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-33" date="1736337600">- Add NoSystem SSLOptions value</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-34" date="1757592000">- RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-35" date="1759406400">- RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-36" date="1763467200">- RHEL-122629 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-37" date="1765540800">- RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-38" date="1773057600">- RHEL-147214 - endless poll loop in http_write when POLLHUP is returned</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.3op2-39" date="1782129600">- RHEL-177957 CVE-2026-34980 cups: control character injection in option values</changelog>
</package>
<package pkgid="2652b3ec5c07a2d34847806ab5cad7a2ba519f92541b13d87187638c5ed43482" name="cups-libs-debuginfo" arch="i686">
  <version epoch="1" ver="2.3.3op2" rel="38.el9_8"/>
  <changelog author="Pavol Zacik &lt;pzacik@redhat.com&gt; - 1:2.3.3op2-29" date="1718798400">- Revert the cups-libs license identifier to the "legacy" format</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-30" date="1723723200">- RHEL-6526 cups source rpm doesn't actually build lspp support
- fix memory leaks from LSPP</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-31" date="1727784000">- RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-32" date="1733745600">- RHEL-68414 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-33" date="1736337600">- Add NoSystem SSLOptions value</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-34" date="1757592000">- RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-35" date="1759406400">- RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-36" date="1763467200">- RHEL-122629 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-37" date="1765540800">- RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-38" date="1773057600">- RHEL-147214 - endless poll loop in http_write when POLLHUP is returned</changelog>
</package>
<package pkgid="7ebca99eb4ec7129e65b39bb49883336b956b17541d100d236805f77c33acc1f" name="cups-libs-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.3.3op2" rel="38.el9_8"/>
  <changelog author="Pavol Zacik &lt;pzacik@redhat.com&gt; - 1:2.3.3op2-29" date="1718798400">- Revert the cups-libs license identifier to the "legacy" format</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-30" date="1723723200">- RHEL-6526 cups source rpm doesn't actually build lspp support
- fix memory leaks from LSPP</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-31" date="1727784000">- RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-32" date="1733745600">- RHEL-68414 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-33" date="1736337600">- Add NoSystem SSLOptions value</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-34" date="1757592000">- RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-35" date="1759406400">- RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-36" date="1763467200">- RHEL-122629 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-37" date="1765540800">- RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-38" date="1773057600">- RHEL-147214 - endless poll loop in http_write when POLLHUP is returned</changelog>
</package>
<package pkgid="faf520c13323b1008753e074c1969d5a4d902e5c878eaf09bdc8a364264b8749" name="cups-libs-debuginfo" arch="i686">
  <version epoch="1" ver="2.3.3op2" rel="39.el9_8"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-30" date="1723723200">- RHEL-6526 cups source rpm doesn't actually build lspp support
- fix memory leaks from LSPP</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-31" date="1727784000">- RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-32" date="1733745600">- RHEL-68414 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-33" date="1736337600">- Add NoSystem SSLOptions value</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-34" date="1757592000">- RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-35" date="1759406400">- RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-36" date="1763467200">- RHEL-122629 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-37" date="1765540800">- RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-38" date="1773057600">- RHEL-147214 - endless poll loop in http_write when POLLHUP is returned</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.3op2-39" date="1782129600">- RHEL-177957 CVE-2026-34980 cups: control character injection in option values</changelog>
</package>
<package pkgid="b7d6e4c2d1daabf1c127df07e6d4c8ec6c507597b3684eeadd629d175963204c" name="cups-libs-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.3.3op2" rel="39.el9_8"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-30" date="1723723200">- RHEL-6526 cups source rpm doesn't actually build lspp support
- fix memory leaks from LSPP</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-31" date="1727784000">- RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-32" date="1733745600">- RHEL-68414 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-33" date="1736337600">- Add NoSystem SSLOptions value</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-34" date="1757592000">- RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-35" date="1759406400">- RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-36" date="1763467200">- RHEL-122629 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-37" date="1765540800">- RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-38" date="1773057600">- RHEL-147214 - endless poll loop in http_write when POLLHUP is returned</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.3op2-39" date="1782129600">- RHEL-177957 CVE-2026-34980 cups: control character injection in option values</changelog>
</package>
<package pkgid="9a569c61a192eab9b5f40150dea59c6841504dde1130f2e8b832b36492574fa1" name="cups-lpd-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.3.3op2" rel="39.el9_8"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-30" date="1723723200">- RHEL-6526 cups source rpm doesn't actually build lspp support
- fix memory leaks from LSPP</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-31" date="1727784000">- RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-32" date="1733745600">- RHEL-68414 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-33" date="1736337600">- Add NoSystem SSLOptions value</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-34" date="1757592000">- RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-35" date="1759406400">- RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-36" date="1763467200">- RHEL-122629 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-37" date="1765540800">- RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-38" date="1773057600">- RHEL-147214 - endless poll loop in http_write when POLLHUP is returned</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.3op2-39" date="1782129600">- RHEL-177957 CVE-2026-34980 cups: control character injection in option values</changelog>
</package>
<package pkgid="324dc06cf70f45b8ba27754a2fe5bf2a85976ad6dc753552f36b96796a325be2" name="cups-printerapp-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.3.3op2" rel="39.el9_8"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-30" date="1723723200">- RHEL-6526 cups source rpm doesn't actually build lspp support
- fix memory leaks from LSPP</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-31" date="1727784000">- RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-32" date="1733745600">- RHEL-68414 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-33" date="1736337600">- Add NoSystem SSLOptions value</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-34" date="1757592000">- RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-35" date="1759406400">- RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-36" date="1763467200">- RHEL-122629 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-37" date="1765540800">- RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.3.3op2-38" date="1773057600">- RHEL-147214 - endless poll loop in http_write when POLLHUP is returned</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.3op2-39" date="1782129600">- RHEL-177957 CVE-2026-34980 cups: control character injection in option values</changelog>
</package>
<package pkgid="5d6ad887f090be0a889b17a13242b6970e1473b1123e2b3771280572cfcb3f24" name="curl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.76.1" rel="40.el9"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-31" date="1724328000">- provide common cleanup method for push headers (CVE-2024-2398)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-32" date="1734436800">- make up incomplete patch for host name wildcard checking (RHEL-5675)
- eliminate use of obsolete patch syntax (RHEL-65791)
- http2: make sure pause is done on HTTP (RHEL-85847)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-33" date="1747310400">- noproxy: support proxies specified using cidr notation (RHEL-81412)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-34" date="1753272000">- revert several disabled tests related to openssl/valgrind (RHEL-99465)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-35" date="1761220800">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121659</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-36" date="1763640000">- rebuild for c9s (RHEL-125838)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-37" date="1764244800">- openssl: respect system crypto policy for TLS max version (RHEL-128914)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-38" date="1764590400">- http: fix crash in rate-limited upload (RHEL-131696)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-39" date="1766059200">- openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40" date="1768996800">- openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721)</changelog>
</package>
<package pkgid="0de28ceeb4dc8f033ed21fbcc74c5e3237fd93364d9a6f699f4927236d000798" name="curl-minimal-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.76.1" rel="40.el9"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-31" date="1724328000">- provide common cleanup method for push headers (CVE-2024-2398)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-32" date="1734436800">- make up incomplete patch for host name wildcard checking (RHEL-5675)
- eliminate use of obsolete patch syntax (RHEL-65791)
- http2: make sure pause is done on HTTP (RHEL-85847)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-33" date="1747310400">- noproxy: support proxies specified using cidr notation (RHEL-81412)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-34" date="1753272000">- revert several disabled tests related to openssl/valgrind (RHEL-99465)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-35" date="1761220800">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121659</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-36" date="1763640000">- rebuild for c9s (RHEL-125838)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-37" date="1764244800">- openssl: respect system crypto policy for TLS max version (RHEL-128914)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-38" date="1764590400">- http: fix crash in rate-limited upload (RHEL-131696)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-39" date="1766059200">- openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40" date="1768996800">- openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721)</changelog>
</package>
<package pkgid="d6c757618aeb27378da5027df13839322e8ff29883207a7aed20e2d625446659" name="device-mapper-debuginfo" arch="x86_64">
  <version epoch="9" ver="1.02.207" rel="4.el9.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4.el9_8.1" date="1773057600">- Fix false positive warnings about stray FDs on s390x.</changelog>
</package>
<package pkgid="8e90ca596839645fdc4bbe9ccb5b53fdada87eb5b421ad705c0bf6e71f239a65" name="device-mapper-event-debuginfo" arch="x86_64">
  <version epoch="9" ver="1.02.207" rel="4.el9.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4.el9_8.1" date="1773057600">- Fix false positive warnings about stray FDs on s390x.</changelog>
</package>
<package pkgid="6d893ecddae4f4f6983634cb4af53ef7e3110a02caa27fb41cb4a9ae77a34d56" name="device-mapper-event-libs-debuginfo" arch="i686">
  <version epoch="9" ver="1.02.207" rel="4.el9.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4.el9_8.1" date="1773057600">- Fix false positive warnings about stray FDs on s390x.</changelog>
</package>
<package pkgid="f0820401da127524f293ae3481b98a08e5d7625748978daedb5838b5bf2be379" name="device-mapper-event-libs-debuginfo" arch="x86_64">
  <version epoch="9" ver="1.02.207" rel="4.el9.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4.el9_8.1" date="1773057600">- Fix false positive warnings about stray FDs on s390x.</changelog>
</package>
<package pkgid="e58715bb5bdff007a4b912c0df93a845684c8d87c6d08c10126863315d83fd3d" name="device-mapper-libs-debuginfo" arch="i686">
  <version epoch="9" ver="1.02.207" rel="4.el9.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4.el9_8.1" date="1773057600">- Fix false positive warnings about stray FDs on s390x.</changelog>
</package>
<package pkgid="b0982b47275e448cc6acdd43573743a37da82b7bfb00a35c1d82d1c57ccce5a6" name="device-mapper-libs-debuginfo" arch="x86_64">
  <version epoch="9" ver="1.02.207" rel="4.el9.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4.el9_8.1" date="1773057600">- Fix false positive warnings about stray FDs on s390x.</changelog>
</package>
<package pkgid="82f5631cb45b3cbd96d5727f2e28a15e5f51c67b031fcdec515f74c21bc5c10b" name="device-mapper-multipath-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.7" rel="45.el9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-36" date="1741089600">- Add 0128-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
- Add 0129-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
- Add 0130-libmpathutil-add-support-for-Unix-pathname-sockets.patch
- Add 0131-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
- Add 0132-multipathd-move-uxsock_trigger-to-uxlsnr.c.patch
- Add 0133-multipathd-uxlsnr-use-symbolic-values-for-pollfd-ind.patch
- Add 0134-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
- Add 0135-multipathd-allow-receiving-two-socket-fds-from-syste.patch
- Add 0136-multipathd-listen-on-pathname-and-abstract-socket-by.patch
- Add 0137-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
- Add 0138-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
- Add 0139-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
  * Fixes RHEL-78758 ("RFE: Enable multipathd to communicate with a
    process in another network namespace")
- Resolves: RHEL-78758</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-37" date="1741867200">- Add 0140-multipath-clean-up-find_multipaths-value-names.patch
- Add 0141-multipathd-Add-multipathd-man-page-section-about-soc.patch
  * Fixes RHEL-82307 ("There is no man page for RFE: Enable multipathd
    to communicate with a process in another network namespace")
- Fix multipath_conf_syntax OSCI test.
- Resolves: RHEL-82307</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-38" date="1744891200">- Add 0142-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
- Add 0143-libmultipath-add-helper-function-check_path_wwid_cha.patch
- Add 0144-multipathd-re-add-paths-skipped-because-they-were-of.patch
  * Fixes RHEL-82534 ("multipathd does not monitor multipath devices
    created externally while there are offline paths.")
- Resolves: RHEL-82534</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-39" date="1752494400">- Add 0145-multipath-tools-add-DellEMC-ME4-PowerVault-ME4-to-ha.patch
- Add 0146-multipath-tools-add-HPE-as-vendor-for-OPEN-XP8-array.patch
- Add 0147-multipath-tools-add-HP-HSVX740-to-hwtable.patch
- Add 0148-multipath-tools-add-DellEMC-ME5-PowerVault-ME5-to-ha.patch
- Add 0149-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
  * Fixes RHEL-103109 ("Update multipath builtin config to add new
    device defaults")
- Resolves: RHEL-103109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-40" date="1759320000">- Add 0150-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
- Add 0151-libmpathpersist-check-released-key-against-the-reser.patch
- Add 0152-multipathd-remove-thread-from-mpath_pr_event_handle.patch
- Add 0153-libmpathpersist-remove-uneeded-wrapper-function.patch
- Add 0154-libmpathpersist-reduce-log-level-for-persistent-rese.patch
- Add 0155-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
- Add 0156-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
- Add 0157-libmpathpersist-limit-changing-prflag-in-update_map_.patch
- Add 0158-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
- Add 0159-libmpathpersist-remove-useless-function-send_prout_a.patch
- Add 0160-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
- Add 0161-limpathpersist-redesign-failed-release-workaround.patch
- Add 0162-libmpathpersist-fail-the-release-if-all-threads-fail.patch
- Add 0163-limpathpersist-Handle-changing-key-corner-case.patch
- Add 0164-libmpathpersist-fix-command-keyword-ordering.patch
- Add 0165-libmpathpersist-use-conf-timeout-for-updating-persis.patch
- Add 0166-libmapthpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
- Add 0167-libmultipath-rename-prflag_value-enums.patch
- Add 0168-libmpathpersist-use-a-switch-statement-for-prout-com.patch
- Add 0169-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
- Add 0170-limpathpersist-remove-update_map_pr-code-for-NULL-pp.patch
- Add 0171-libmpathpersist-move-update_map_pr-to-multipathd.patch
- Add 0172-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
- Add 0173-libmpathpersist-clean-up-duplicate-function-declarat.patch
- Add 0174-multipathd-wrap-setting-and-unsetting-prflag.patch
- Add 0175-multipathd-unregister-PR-key-when-path-is-restored-i.patch
- Add 0176-libmpathpersist-Fix-up-reservation_key-checking.patch
- Add 0177-libmpathpersist-change-how-reservation-conflicts-are.patch
- Add 0178-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
- Add 0179-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
- Add 0180-libmpathpersist-Restore-old-reservation-key-on-failu.patch
- Add 0181-libmpatpersist-update-reservation-key-before-checkin.patch
- Add 0182-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
- Add 0183-libmpathpersist-Don-t-always-fail-registrations-for-.patch
- Add 0184-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
- Add 0185-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
- Add 0186-libmpathpersist-reregister-keys-when-self-preempting.patch
- Add 0187-libmpathpersist-handle-updating-key-race-condition.patch
- Add 0188-libmpathpersist-handle-preempting-all-registrants-re.patch
- Add 0189-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
- Add 0190-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
- Add 0191-libmpathpersist-use-check_holding_reservation-in-mpa.patch
- Add 0192-libmpathpersist-Fix-unregistering-while-holding-the-.patch
- Add 0193-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
- Add 0194-multipathd-Fix-tracking-of-old-PR-key.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-41" date="1762862400">- Add 0195-multipathd-Fix-race-while-registering-PR-key.patch
- Add 0196-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-42" date="1763553600">- Add 0197-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
  * Fixes RHEL-128396 ("Update the multipath.conf stanza for Infinidat
    storage [rhel-9]")
- Resolves: RHEL-128396</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-43" date="1769083200">- Add 0198-multipathd-print-path-offline-message-even-without-a.patch
  * Fixes RHEL-133814 ("log_checker_err is not printing messages
    repeatedly for failed path [rhel-9]")
- Add 0199-libmultipath-improve-cleanup-of-uevent-queues-on-exi.patch
- Add 0200-uevent_dispatch-use-while-in-wait-loop.patch
- Add 0201-libmultipath-uevent_dispatch-process-uevents-one-by-.patch
- Add 0202-libmultipath-uevent_listen-don-t-delay-uevents.patch
- Add 0203-libmultipath-uevent-use-struct-to-pass-parameters-ar.patch
- Add 0204-libmultipath-is_uevent_busy-check-servicing_uev-unde.patch
- Add 0205-multipathd-make-multipathd-show-status-busy-checker-.patch
  * Fixes RHEL-135904 (VM reboot in RHOSP environment fails with error
    "Could not open '/dev/dm-95': No such file or directory")
- Resolves: RHEL-133814
- Resolves: RHEL-135904</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-44" date="1769688000">- Add 0206-libmultipath-add-purge_disconnected-configuration-op.patch
- Add 0207-multipathd-implement-purge-functionality-for-disconn.patch
  * Fixes RHEL-141291 ("Add purge_disconnected support to multipathd
    [rhel-9]")
- Resolves: RHEL-141291</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-45" date="1771502400">- Add 0208-libmpathpersist-fix-register-retry-status-checking.patch
- Add 0209-multipathd-remember-number-of-registered-keys-when-i.patch
- Add 0210-libmpathpersist-fix-code-for-skipping-multipathd-pat.patch
  * Fixes RHEL-148462 ("Improve multipathd's handling of updating
    persistent reservations on restored paths. [rhel-9]")
- Resolves: RHEL-148462</changelog>
</package>
<package pkgid="92f86d5e32d212f18dd4213c5210aba2ccdfaafd258662a7e0de8f76b57751cc" name="device-mapper-multipath-libs-debuginfo" arch="i686">
  <version epoch="0" ver="0.8.7" rel="45.el9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-36" date="1741089600">- Add 0128-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
- Add 0129-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
- Add 0130-libmpathutil-add-support-for-Unix-pathname-sockets.patch
- Add 0131-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
- Add 0132-multipathd-move-uxsock_trigger-to-uxlsnr.c.patch
- Add 0133-multipathd-uxlsnr-use-symbolic-values-for-pollfd-ind.patch
- Add 0134-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
- Add 0135-multipathd-allow-receiving-two-socket-fds-from-syste.patch
- Add 0136-multipathd-listen-on-pathname-and-abstract-socket-by.patch
- Add 0137-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
- Add 0138-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
- Add 0139-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
  * Fixes RHEL-78758 ("RFE: Enable multipathd to communicate with a
    process in another network namespace")
- Resolves: RHEL-78758</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-37" date="1741867200">- Add 0140-multipath-clean-up-find_multipaths-value-names.patch
- Add 0141-multipathd-Add-multipathd-man-page-section-about-soc.patch
  * Fixes RHEL-82307 ("There is no man page for RFE: Enable multipathd
    to communicate with a process in another network namespace")
- Fix multipath_conf_syntax OSCI test.
- Resolves: RHEL-82307</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-38" date="1744891200">- Add 0142-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
- Add 0143-libmultipath-add-helper-function-check_path_wwid_cha.patch
- Add 0144-multipathd-re-add-paths-skipped-because-they-were-of.patch
  * Fixes RHEL-82534 ("multipathd does not monitor multipath devices
    created externally while there are offline paths.")
- Resolves: RHEL-82534</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-39" date="1752494400">- Add 0145-multipath-tools-add-DellEMC-ME4-PowerVault-ME4-to-ha.patch
- Add 0146-multipath-tools-add-HPE-as-vendor-for-OPEN-XP8-array.patch
- Add 0147-multipath-tools-add-HP-HSVX740-to-hwtable.patch
- Add 0148-multipath-tools-add-DellEMC-ME5-PowerVault-ME5-to-ha.patch
- Add 0149-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
  * Fixes RHEL-103109 ("Update multipath builtin config to add new
    device defaults")
- Resolves: RHEL-103109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-40" date="1759320000">- Add 0150-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
- Add 0151-libmpathpersist-check-released-key-against-the-reser.patch
- Add 0152-multipathd-remove-thread-from-mpath_pr_event_handle.patch
- Add 0153-libmpathpersist-remove-uneeded-wrapper-function.patch
- Add 0154-libmpathpersist-reduce-log-level-for-persistent-rese.patch
- Add 0155-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
- Add 0156-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
- Add 0157-libmpathpersist-limit-changing-prflag-in-update_map_.patch
- Add 0158-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
- Add 0159-libmpathpersist-remove-useless-function-send_prout_a.patch
- Add 0160-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
- Add 0161-limpathpersist-redesign-failed-release-workaround.patch
- Add 0162-libmpathpersist-fail-the-release-if-all-threads-fail.patch
- Add 0163-limpathpersist-Handle-changing-key-corner-case.patch
- Add 0164-libmpathpersist-fix-command-keyword-ordering.patch
- Add 0165-libmpathpersist-use-conf-timeout-for-updating-persis.patch
- Add 0166-libmapthpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
- Add 0167-libmultipath-rename-prflag_value-enums.patch
- Add 0168-libmpathpersist-use-a-switch-statement-for-prout-com.patch
- Add 0169-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
- Add 0170-limpathpersist-remove-update_map_pr-code-for-NULL-pp.patch
- Add 0171-libmpathpersist-move-update_map_pr-to-multipathd.patch
- Add 0172-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
- Add 0173-libmpathpersist-clean-up-duplicate-function-declarat.patch
- Add 0174-multipathd-wrap-setting-and-unsetting-prflag.patch
- Add 0175-multipathd-unregister-PR-key-when-path-is-restored-i.patch
- Add 0176-libmpathpersist-Fix-up-reservation_key-checking.patch
- Add 0177-libmpathpersist-change-how-reservation-conflicts-are.patch
- Add 0178-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
- Add 0179-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
- Add 0180-libmpathpersist-Restore-old-reservation-key-on-failu.patch
- Add 0181-libmpatpersist-update-reservation-key-before-checkin.patch
- Add 0182-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
- Add 0183-libmpathpersist-Don-t-always-fail-registrations-for-.patch
- Add 0184-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
- Add 0185-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
- Add 0186-libmpathpersist-reregister-keys-when-self-preempting.patch
- Add 0187-libmpathpersist-handle-updating-key-race-condition.patch
- Add 0188-libmpathpersist-handle-preempting-all-registrants-re.patch
- Add 0189-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
- Add 0190-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
- Add 0191-libmpathpersist-use-check_holding_reservation-in-mpa.patch
- Add 0192-libmpathpersist-Fix-unregistering-while-holding-the-.patch
- Add 0193-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
- Add 0194-multipathd-Fix-tracking-of-old-PR-key.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-41" date="1762862400">- Add 0195-multipathd-Fix-race-while-registering-PR-key.patch
- Add 0196-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-42" date="1763553600">- Add 0197-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
  * Fixes RHEL-128396 ("Update the multipath.conf stanza for Infinidat
    storage [rhel-9]")
- Resolves: RHEL-128396</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-43" date="1769083200">- Add 0198-multipathd-print-path-offline-message-even-without-a.patch
  * Fixes RHEL-133814 ("log_checker_err is not printing messages
    repeatedly for failed path [rhel-9]")
- Add 0199-libmultipath-improve-cleanup-of-uevent-queues-on-exi.patch
- Add 0200-uevent_dispatch-use-while-in-wait-loop.patch
- Add 0201-libmultipath-uevent_dispatch-process-uevents-one-by-.patch
- Add 0202-libmultipath-uevent_listen-don-t-delay-uevents.patch
- Add 0203-libmultipath-uevent-use-struct-to-pass-parameters-ar.patch
- Add 0204-libmultipath-is_uevent_busy-check-servicing_uev-unde.patch
- Add 0205-multipathd-make-multipathd-show-status-busy-checker-.patch
  * Fixes RHEL-135904 (VM reboot in RHOSP environment fails with error
    "Could not open '/dev/dm-95': No such file or directory")
- Resolves: RHEL-133814
- Resolves: RHEL-135904</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-44" date="1769688000">- Add 0206-libmultipath-add-purge_disconnected-configuration-op.patch
- Add 0207-multipathd-implement-purge-functionality-for-disconn.patch
  * Fixes RHEL-141291 ("Add purge_disconnected support to multipathd
    [rhel-9]")
- Resolves: RHEL-141291</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-45" date="1771502400">- Add 0208-libmpathpersist-fix-register-retry-status-checking.patch
- Add 0209-multipathd-remember-number-of-registered-keys-when-i.patch
- Add 0210-libmpathpersist-fix-code-for-skipping-multipathd-pat.patch
  * Fixes RHEL-148462 ("Improve multipathd's handling of updating
    persistent reservations on restored paths. [rhel-9]")
- Resolves: RHEL-148462</changelog>
</package>
<package pkgid="cee43ce9696c4779218641a5eb4ef291dadd39014fb79babf4bae9208f6d6a77" name="device-mapper-multipath-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.7" rel="45.el9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-36" date="1741089600">- Add 0128-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
- Add 0129-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
- Add 0130-libmpathutil-add-support-for-Unix-pathname-sockets.patch
- Add 0131-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
- Add 0132-multipathd-move-uxsock_trigger-to-uxlsnr.c.patch
- Add 0133-multipathd-uxlsnr-use-symbolic-values-for-pollfd-ind.patch
- Add 0134-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
- Add 0135-multipathd-allow-receiving-two-socket-fds-from-syste.patch
- Add 0136-multipathd-listen-on-pathname-and-abstract-socket-by.patch
- Add 0137-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
- Add 0138-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
- Add 0139-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
  * Fixes RHEL-78758 ("RFE: Enable multipathd to communicate with a
    process in another network namespace")
- Resolves: RHEL-78758</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-37" date="1741867200">- Add 0140-multipath-clean-up-find_multipaths-value-names.patch
- Add 0141-multipathd-Add-multipathd-man-page-section-about-soc.patch
  * Fixes RHEL-82307 ("There is no man page for RFE: Enable multipathd
    to communicate with a process in another network namespace")
- Fix multipath_conf_syntax OSCI test.
- Resolves: RHEL-82307</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-38" date="1744891200">- Add 0142-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
- Add 0143-libmultipath-add-helper-function-check_path_wwid_cha.patch
- Add 0144-multipathd-re-add-paths-skipped-because-they-were-of.patch
  * Fixes RHEL-82534 ("multipathd does not monitor multipath devices
    created externally while there are offline paths.")
- Resolves: RHEL-82534</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-39" date="1752494400">- Add 0145-multipath-tools-add-DellEMC-ME4-PowerVault-ME4-to-ha.patch
- Add 0146-multipath-tools-add-HPE-as-vendor-for-OPEN-XP8-array.patch
- Add 0147-multipath-tools-add-HP-HSVX740-to-hwtable.patch
- Add 0148-multipath-tools-add-DellEMC-ME5-PowerVault-ME5-to-ha.patch
- Add 0149-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
  * Fixes RHEL-103109 ("Update multipath builtin config to add new
    device defaults")
- Resolves: RHEL-103109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-40" date="1759320000">- Add 0150-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
- Add 0151-libmpathpersist-check-released-key-against-the-reser.patch
- Add 0152-multipathd-remove-thread-from-mpath_pr_event_handle.patch
- Add 0153-libmpathpersist-remove-uneeded-wrapper-function.patch
- Add 0154-libmpathpersist-reduce-log-level-for-persistent-rese.patch
- Add 0155-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
- Add 0156-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
- Add 0157-libmpathpersist-limit-changing-prflag-in-update_map_.patch
- Add 0158-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
- Add 0159-libmpathpersist-remove-useless-function-send_prout_a.patch
- Add 0160-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
- Add 0161-limpathpersist-redesign-failed-release-workaround.patch
- Add 0162-libmpathpersist-fail-the-release-if-all-threads-fail.patch
- Add 0163-limpathpersist-Handle-changing-key-corner-case.patch
- Add 0164-libmpathpersist-fix-command-keyword-ordering.patch
- Add 0165-libmpathpersist-use-conf-timeout-for-updating-persis.patch
- Add 0166-libmapthpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
- Add 0167-libmultipath-rename-prflag_value-enums.patch
- Add 0168-libmpathpersist-use-a-switch-statement-for-prout-com.patch
- Add 0169-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
- Add 0170-limpathpersist-remove-update_map_pr-code-for-NULL-pp.patch
- Add 0171-libmpathpersist-move-update_map_pr-to-multipathd.patch
- Add 0172-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
- Add 0173-libmpathpersist-clean-up-duplicate-function-declarat.patch
- Add 0174-multipathd-wrap-setting-and-unsetting-prflag.patch
- Add 0175-multipathd-unregister-PR-key-when-path-is-restored-i.patch
- Add 0176-libmpathpersist-Fix-up-reservation_key-checking.patch
- Add 0177-libmpathpersist-change-how-reservation-conflicts-are.patch
- Add 0178-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
- Add 0179-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
- Add 0180-libmpathpersist-Restore-old-reservation-key-on-failu.patch
- Add 0181-libmpatpersist-update-reservation-key-before-checkin.patch
- Add 0182-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
- Add 0183-libmpathpersist-Don-t-always-fail-registrations-for-.patch
- Add 0184-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
- Add 0185-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
- Add 0186-libmpathpersist-reregister-keys-when-self-preempting.patch
- Add 0187-libmpathpersist-handle-updating-key-race-condition.patch
- Add 0188-libmpathpersist-handle-preempting-all-registrants-re.patch
- Add 0189-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
- Add 0190-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
- Add 0191-libmpathpersist-use-check_holding_reservation-in-mpa.patch
- Add 0192-libmpathpersist-Fix-unregistering-while-holding-the-.patch
- Add 0193-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
- Add 0194-multipathd-Fix-tracking-of-old-PR-key.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-41" date="1762862400">- Add 0195-multipathd-Fix-race-while-registering-PR-key.patch
- Add 0196-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-42" date="1763553600">- Add 0197-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
  * Fixes RHEL-128396 ("Update the multipath.conf stanza for Infinidat
    storage [rhel-9]")
- Resolves: RHEL-128396</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-43" date="1769083200">- Add 0198-multipathd-print-path-offline-message-even-without-a.patch
  * Fixes RHEL-133814 ("log_checker_err is not printing messages
    repeatedly for failed path [rhel-9]")
- Add 0199-libmultipath-improve-cleanup-of-uevent-queues-on-exi.patch
- Add 0200-uevent_dispatch-use-while-in-wait-loop.patch
- Add 0201-libmultipath-uevent_dispatch-process-uevents-one-by-.patch
- Add 0202-libmultipath-uevent_listen-don-t-delay-uevents.patch
- Add 0203-libmultipath-uevent-use-struct-to-pass-parameters-ar.patch
- Add 0204-libmultipath-is_uevent_busy-check-servicing_uev-unde.patch
- Add 0205-multipathd-make-multipathd-show-status-busy-checker-.patch
  * Fixes RHEL-135904 (VM reboot in RHOSP environment fails with error
    "Could not open '/dev/dm-95': No such file or directory")
- Resolves: RHEL-133814
- Resolves: RHEL-135904</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-44" date="1769688000">- Add 0206-libmultipath-add-purge_disconnected-configuration-op.patch
- Add 0207-multipathd-implement-purge-functionality-for-disconn.patch
  * Fixes RHEL-141291 ("Add purge_disconnected support to multipathd
    [rhel-9]")
- Resolves: RHEL-141291</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-45" date="1771502400">- Add 0208-libmpathpersist-fix-register-retry-status-checking.patch
- Add 0209-multipathd-remember-number-of-registered-keys-when-i.patch
- Add 0210-libmpathpersist-fix-code-for-skipping-multipathd-pat.patch
  * Fixes RHEL-148462 ("Improve multipathd's handling of updating
    persistent reservations on restored paths. [rhel-9]")
- Resolves: RHEL-148462</changelog>
</package>
<package pkgid="c7309d4310f3a50720460ea5727bdcf9e8347cfb7aface58b3f5d9adc0c28a5b" name="dhcp-client-debuginfo" arch="x86_64">
  <version epoch="12" ver="4.4.2" rel="20.b1.el9"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.2-20.b1" date="1767787200">- Create /var/lib/dhcpd through systemd-tmpfiles
  Resolves: RHEL-134207</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 4.4.2-20.b1" date="1780056000">- Change bug tracker path</changelog>
</package>
<package pkgid="0e454a47a515810342ef80615e5a70d8466d0bea76d0d1bb6532103fb9a3d140" name="dhcp-relay-debuginfo" arch="x86_64">
  <version epoch="12" ver="4.4.2" rel="20.b1.el9"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.2-20.b1" date="1767787200">- Create /var/lib/dhcpd through systemd-tmpfiles
  Resolves: RHEL-134207</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 4.4.2-20.b1" date="1780056000">- Change bug tracker path</changelog>
</package>
<package pkgid="41c633b3f1acbc0478bbd3b02f3fc97ff0ee2b38133037cce70aa5f6aeaca85e" name="dhcp-server-debuginfo" arch="x86_64">
  <version epoch="12" ver="4.4.2" rel="20.b1.el9"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.2-20.b1" date="1767787200">- Create /var/lib/dhcpd through systemd-tmpfiles
  Resolves: RHEL-134207</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 4.4.2-20.b1" date="1780056000">- Change bug tracker path</changelog>
</package>
<package pkgid="1d5b90d845ce19638baa209dc90715e1f35a9a028547e28b6dbf9908ee24626e" name="dnsmasq-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.85" rel="18.el9_8.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.85-17" date="1754481600">- Backport filter-A and filter-AAAA options (RHEL-105367)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 2.85-18" date="1765454400">- Added installation of tmpfiles config.
- Resolves: RHEL-135305</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.85-18.1" date="1777982400">- Prevent overflow in extract_name function (CVE-2026-2291)
- Prevent DoS in DNSSEC validation (CVE-2026-4890)
- Prevent out-of-bounds read in DNSSEC validation (CVE-2026-4891)
- Prevent out-of-bounds write in DHCPv6 server (CVE-2026-4892)
- Prevent source check avoidance by RFC 7871 client-subnet (CVE-2026-4893)</changelog>
</package>
<package pkgid="a350d913f0d75b8d5fb2065acca3f0623fa9ed8e323bd315a5f2a64c28c952ce" name="dnsmasq-debugsource" arch="x86_64">
  <version epoch="0" ver="2.85" rel="18.el9_8.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.85-17" date="1754481600">- Backport filter-A and filter-AAAA options (RHEL-105367)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 2.85-18" date="1765454400">- Added installation of tmpfiles config.
- Resolves: RHEL-135305</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.85-18.1" date="1777982400">- Prevent overflow in extract_name function (CVE-2026-2291)
- Prevent DoS in DNSSEC validation (CVE-2026-4890)
- Prevent out-of-bounds read in DNSSEC validation (CVE-2026-4891)
- Prevent out-of-bounds write in DHCPv6 server (CVE-2026-4892)
- Prevent source check avoidance by RFC 7871 client-subnet (CVE-2026-4893)</changelog>
</package>
<package pkgid="3610e31a29236b10040d53e7f85999539a0990020d9cb03d73c4a67f09eb11c8" name="dnsmasq-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.85" rel="18.el9_8.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.85-17" date="1754481600">- Backport filter-A and filter-AAAA options (RHEL-105367)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 2.85-18" date="1765454400">- Added installation of tmpfiles config.
- Resolves: RHEL-135305</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.85-18.1" date="1777982400">- Prevent overflow in extract_name function (CVE-2026-2291)
- Prevent DoS in DNSSEC validation (CVE-2026-4890)
- Prevent out-of-bounds read in DNSSEC validation (CVE-2026-4891)
- Prevent out-of-bounds write in DHCPv6 server (CVE-2026-4892)
- Prevent source check avoidance by RFC 7871 client-subnet (CVE-2026-4893)</changelog>
</package>
<package pkgid="eb7f144f921774e2100beb493aa432f51778278c4307657b9d098bf3d8c917d4" name="dotnet-apphost-pack-10.0-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.0.10" rel="1.el9_8"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125748</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130938</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138640</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144974</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774612800">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152953</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163386</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173910</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181558</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191641</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192462</changelog>
</package>
<package pkgid="004d6cfdfa94ff548952e2c7306044900a83c1a0b3fd180c31a4d6698711a96d" name="dotnet-apphost-pack-10.0-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="1.el9_8"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.9" date="1758024000">- Disable bootstrap
- Resolves: RHEL-114572</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.10" date="1760702400">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121559</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125748</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130938</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138640</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144974</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774612800">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152953</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163386</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173910</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181558</changelog>
</package>
<package pkgid="6f30f2cb2fa338dc313c7d5b1489b9f1314325b08788905e75b9605ff466a80a" name="dotnet-apphost-pack-9.0-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.0.17" rel="1.el9_8"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106728</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112269</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116858</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125743</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138645</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144970</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774612800">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152945</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163397</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173918</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181553</changelog>
</package>
<package pkgid="696d4c3e7676d8ab4cbac5734ccfa4f6136fca15b158dce7bdde0c3d01c0f3a1" name="dotnet-apphost-pack-9.0-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.0.18" rel="1.el9_8"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116858</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125743</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138645</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144970</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774612800">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152945</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163397</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173918</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181553</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191646</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192472</changelog>
</package>
<package pkgid="eeaa5af432b9f1f2361607193d97aa77fdaffaad9ecb82cf12b8feb47ca2e93d" name="dotnet-host-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.0.10" rel="1.el9_8"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125748</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130938</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138640</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144974</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774612800">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152953</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163386</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173910</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181558</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191641</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192462</changelog>
</package>
<package pkgid="5357aeb57d29b1739203835de5ae3644ff6c7eddf6355e663cdb4326221356ad" name="dotnet-host-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="1.el9_8"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.9" date="1758024000">- Disable bootstrap
- Resolves: RHEL-114572</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.10" date="1760702400">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121559</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125748</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130938</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138640</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144974</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774612800">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152953</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163386</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173910</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181558</changelog>
</package>
<package pkgid="e77a23b0b6818e65dd26798da4fa64a9740fa9f55acc3e9c1289e8db148a4693" name="dotnet-hostfxr-10.0-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.0.10" rel="1.el9_8"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125748</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130938</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138640</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144974</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774612800">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152953</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163386</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173910</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181558</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191641</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192462</changelog>
</package>
<package pkgid="45a3004d1c30da1a597f670b4163a43a6209c4783b845bcde1e93dba81698a18" name="dotnet-hostfxr-10.0-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="1.el9_8"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.9" date="1758024000">- Disable bootstrap
- Resolves: RHEL-114572</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.10" date="1760702400">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121559</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125748</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130938</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138640</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144974</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774612800">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152953</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163386</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173910</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181558</changelog>
</package>
<package pkgid="6ed28eb7dff74ab3cceb2767bd0aa0041068634d2923a5b794f903574bc75c10" name="dotnet-hostfxr-9.0-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.0.17" rel="1.el9_8"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106728</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112269</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116858</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125743</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138645</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144970</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774612800">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152945</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163397</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173918</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181553</changelog>
</package>
<package pkgid="a0c4ae474fe23741ef31f4297b0dcd2932710455dcd5dbe8aaf21e1c20cf4621" name="dotnet-hostfxr-9.0-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.0.18" rel="1.el9_8"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116858</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125743</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138645</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144970</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774612800">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152945</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163397</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173918</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181553</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191646</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192472</changelog>
</package>
<package pkgid="11f610bbcc6820fd6a99cba29b0d13339110d6465311fafc4c88bf2308b631e1" name="dotnet-runtime-10.0-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.0.10" rel="1.el9_8"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125748</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130938</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138640</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144974</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774612800">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152953</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163386</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173910</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181558</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191641</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192462</changelog>
</package>
<package pkgid="62ea7f7e00d5dce38590d6b8b0ac2d0e7b116210a768ffe4a7253f5911eab7a2" name="dotnet-runtime-10.0-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="1.el9_8"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.9" date="1758024000">- Disable bootstrap
- Resolves: RHEL-114572</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.10" date="1760702400">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121559</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125748</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130938</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138640</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144974</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774612800">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152953</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163386</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173910</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181558</changelog>
</package>
<package pkgid="cb4124c4d331baab0dc35e1461d812d4665c44a50933747f27d170fe565c41e2" name="dotnet-runtime-9.0-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.0.17" rel="1.el9_8"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106728</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112269</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116858</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125743</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138645</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144970</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774612800">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152945</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163397</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173918</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181553</changelog>
</package>
<package pkgid="4791274134a36cbb82ee3368836a7697768d168fcbc8db7a2f995ee17eff6c8f" name="dotnet-runtime-9.0-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.0.18" rel="1.el9_8"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116858</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125743</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138645</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144970</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774612800">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152945</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163397</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173918</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181553</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191646</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192472</changelog>
</package>
<package pkgid="431bb45c59040c5c245b29589532b1d6a40a749181daafe6f1bfee26d148a28f" name="dotnet-sdk-10.0-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.0.109" rel="1.el9_8"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.9" date="1758024000">- Disable bootstrap
- Resolves: RHEL-114572</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.10" date="1760702400">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121559</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125748</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130938</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138640</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144974</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774612800">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152953</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163386</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173910</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181558</changelog>
</package>
<package pkgid="f0fb46f8ff52cbf5226b3cd6ac0228852afae5172cbb59550db95536a29e9150" name="dotnet-sdk-10.0-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.0.110" rel="1.el9_8"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125748</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130938</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138640</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144974</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774612800">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152953</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163386</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173910</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181558</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191641</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192462</changelog>
</package>
<package pkgid="ecf1d820715f244a701749df017327baac881148ec4fa7d8017be6ba7fabb852" name="dotnet-sdk-9.0-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.0.118" rel="1.el9_8"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106728</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112269</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116858</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125743</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138645</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144970</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774612800">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152945</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163397</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173918</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181553</changelog>
</package>
<package pkgid="e709a454b4318d54ae3966b7d9e8dfdde726ec41ca696d5e6782c7913f8f7c62" name="dotnet-sdk-9.0-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.0.119" rel="1.el9_8"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116858</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125743</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138645</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144970</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774612800">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152945</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163397</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173918</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181553</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191646</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192472</changelog>
</package>
<package pkgid="111f902678a1f9d8136d049c372b0536bb9c6bf9b404ac0b2a12c7e40ab1b064" name="dotnet-sdk-aot-9.0-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.0.118" rel="1.el9_8"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106728</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112269</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116858</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125743</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138645</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144970</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774612800">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152945</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163397</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173918</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181553</changelog>
</package>
<package pkgid="7c46992ac2389c5f80c50d384a5087776fc6df151a48cc54233dc46bf91221e1" name="dotnet-sdk-aot-9.0-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.0.119" rel="1.el9_8"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116858</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125743</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138645</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144970</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774612800">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152945</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163397</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173918</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181553</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191646</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192472</changelog>
</package>
<package pkgid="664469ce061568e7f3a0e3b8576d225033d689a5b005273c410908364c1ae510" name="dotnet10.0-debugsource" arch="x86_64">
  <version epoch="0" ver="10.0.109" rel="1.el9_8"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.9" date="1758024000">- Disable bootstrap
- Resolves: RHEL-114572</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.10" date="1760702400">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121559</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125748</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130938</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138640</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144974</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774612800">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152953</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163386</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173910</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181558</changelog>
</package>
<package pkgid="06fb1daaa36416676fbf86c5c6067b255fe11605c62ae64b0e06c93dd10b521a" name="dotnet10.0-debugsource" arch="x86_64">
  <version epoch="0" ver="10.0.110" rel="1.el9_8"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125748</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130938</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138640</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144974</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774612800">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152953</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163386</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173910</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181558</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191641</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192462</changelog>
</package>
<package pkgid="65692cce5963fcb75ac5fbecc2fd79efdce6cb3e57a641be1a443d390c1b1978" name="dotnet9.0-debugsource" arch="x86_64">
  <version epoch="0" ver="9.0.118" rel="1.el9_8"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106728</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112269</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116858</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125743</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138645</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144970</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774612800">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152945</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163397</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173918</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181553</changelog>
</package>
<package pkgid="42a635524567a014caa89cd5cda865510d9e2424b3d368ac53eb9949ecdf082c" name="dotnet9.0-debugsource" arch="x86_64">
  <version epoch="0" ver="9.0.119" rel="1.el9_8"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116858</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125743</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138645</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144970</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774612800">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152945</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163397</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173918</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181553</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191646</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192472</changelog>
</package>
<package pkgid="b03c28f782a750621c29fcd7ed8d9d97320ce311e0fbad3f2f14be0d9b5ba631" name="dovecot-debuginfo" arch="i686">
  <version epoch="1" ver="2.3.16" rel="18.el9_8.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-12" date="1722859200">- fix crash when user has sieve script that includes two missing scripts (RHEL-37160)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-13" date="1722859201">- rebuild with updated tests</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-14" date="1724155200">- fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
- fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-15" date="1738756800">- fix sysusers config file name (RHEL-77322)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-16" date="1768219200">- add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098)
- fix building with latest openssl (RHEL-140619)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-17" date="1777896000">- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-18" date="1778500800">- rebuild</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.16-18.1" date="1782475200">- fix CVE-2026-42006: IMAP parser list_count_limit bypass via open
  parentheses (RHEL-188468)</changelog>
</package>
<package pkgid="8ea4fcf67b1d0b5c521b85ed58261c189b886fd6d00547c8360dcf4363429258" name="dovecot-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.3.16" rel="18.el9_8.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-12" date="1722859200">- fix crash when user has sieve script that includes two missing scripts (RHEL-37160)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-13" date="1722859201">- rebuild with updated tests</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-14" date="1724155200">- fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
- fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-15" date="1738756800">- fix sysusers config file name (RHEL-77322)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-16" date="1768219200">- add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098)
- fix building with latest openssl (RHEL-140619)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-17" date="1777896000">- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-18" date="1778500800">- rebuild</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.16-18.1" date="1782475200">- fix CVE-2026-42006: IMAP parser list_count_limit bypass via open
  parentheses (RHEL-188468)</changelog>
</package>
<package pkgid="55f4fc4e7df2dcf74bb45db64b417e11c448e4a6a5f55d9e130c1c1073ddfff6" name="dovecot-debuginfo" arch="i686">
  <version epoch="1" ver="2.3.16" rel="18.el9_8"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-12" date="1722859200">- fix crash when user has sieve script that includes two missing scripts (RHEL-37160)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-13" date="1722859201">- rebuild with updated tests</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-14" date="1724155200">- fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
- fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-15" date="1738756800">- fix sysusers config file name (RHEL-77322)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-16" date="1768219200">- add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098)
- fix building with latest openssl (RHEL-140619)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-17" date="1777896000">- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-18" date="1778500800">- rebuild</changelog>
</package>
<package pkgid="cca1149d84f6780388edb419b4837445533afc1a08c5869727e01ca258438fad" name="dovecot-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.3.16" rel="18.el9_8"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-12" date="1722859200">- fix crash when user has sieve script that includes two missing scripts (RHEL-37160)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-13" date="1722859201">- rebuild with updated tests</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-14" date="1724155200">- fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
- fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-15" date="1738756800">- fix sysusers config file name (RHEL-77322)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-16" date="1768219200">- add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098)
- fix building with latest openssl (RHEL-140619)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-17" date="1777896000">- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-18" date="1778500800">- rebuild</changelog>
</package>
<package pkgid="4a7affc704022ea5a8fc0372d91d2697be5f77529f28bb8ccbb11466cd04004c" name="dovecot-debugsource" arch="i686">
  <version epoch="1" ver="2.3.16" rel="18.el9_8.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-12" date="1722859200">- fix crash when user has sieve script that includes two missing scripts (RHEL-37160)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-13" date="1722859201">- rebuild with updated tests</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-14" date="1724155200">- fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
- fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-15" date="1738756800">- fix sysusers config file name (RHEL-77322)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-16" date="1768219200">- add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098)
- fix building with latest openssl (RHEL-140619)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-17" date="1777896000">- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-18" date="1778500800">- rebuild</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.16-18.1" date="1782475200">- fix CVE-2026-42006: IMAP parser list_count_limit bypass via open
  parentheses (RHEL-188468)</changelog>
</package>
<package pkgid="27ca9fd0398d32cfc91b8e824b8b2169cd361bab0f4c45a33063ea85d91c5570" name="dovecot-debugsource" arch="x86_64">
  <version epoch="1" ver="2.3.16" rel="18.el9_8.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-12" date="1722859200">- fix crash when user has sieve script that includes two missing scripts (RHEL-37160)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-13" date="1722859201">- rebuild with updated tests</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-14" date="1724155200">- fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
- fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-15" date="1738756800">- fix sysusers config file name (RHEL-77322)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-16" date="1768219200">- add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098)
- fix building with latest openssl (RHEL-140619)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-17" date="1777896000">- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-18" date="1778500800">- rebuild</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.16-18.1" date="1782475200">- fix CVE-2026-42006: IMAP parser list_count_limit bypass via open
  parentheses (RHEL-188468)</changelog>
</package>
<package pkgid="94337d9c7d1290578d2760fbb5bd126236ce761c18439d94733dc1246b54fec8" name="dovecot-debugsource" arch="i686">
  <version epoch="1" ver="2.3.16" rel="18.el9_8"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-12" date="1722859200">- fix crash when user has sieve script that includes two missing scripts (RHEL-37160)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-13" date="1722859201">- rebuild with updated tests</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-14" date="1724155200">- fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
- fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-15" date="1738756800">- fix sysusers config file name (RHEL-77322)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-16" date="1768219200">- add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098)
- fix building with latest openssl (RHEL-140619)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-17" date="1777896000">- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-18" date="1778500800">- rebuild</changelog>
</package>
<package pkgid="4391239b6449fcc58845610afe84cb15cc8e238c81b629782b4690f83ec92c7f" name="dovecot-debugsource" arch="x86_64">
  <version epoch="1" ver="2.3.16" rel="18.el9_8"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-12" date="1722859200">- fix crash when user has sieve script that includes two missing scripts (RHEL-37160)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-13" date="1722859201">- rebuild with updated tests</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-14" date="1724155200">- fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
- fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-15" date="1738756800">- fix sysusers config file name (RHEL-77322)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-16" date="1768219200">- add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098)
- fix building with latest openssl (RHEL-140619)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-17" date="1777896000">- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-18" date="1778500800">- rebuild</changelog>
</package>
<package pkgid="666320a8cf9251e2c3f9f4035d20cfd473ce5484559122d494a7798c878b1301" name="dovecot-mysql-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.3.16" rel="18.el9_8.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-12" date="1722859200">- fix crash when user has sieve script that includes two missing scripts (RHEL-37160)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-13" date="1722859201">- rebuild with updated tests</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-14" date="1724155200">- fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
- fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-15" date="1738756800">- fix sysusers config file name (RHEL-77322)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-16" date="1768219200">- add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098)
- fix building with latest openssl (RHEL-140619)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-17" date="1777896000">- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-18" date="1778500800">- rebuild</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.16-18.1" date="1782475200">- fix CVE-2026-42006: IMAP parser list_count_limit bypass via open
  parentheses (RHEL-188468)</changelog>
</package>
<package pkgid="fda407ac2499fa4b33f7900bb62266c5258500c0e79526867af7be2c47c966ff" name="dovecot-mysql-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.3.16" rel="18.el9_8"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-12" date="1722859200">- fix crash when user has sieve script that includes two missing scripts (RHEL-37160)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-13" date="1722859201">- rebuild with updated tests</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-14" date="1724155200">- fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
- fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-15" date="1738756800">- fix sysusers config file name (RHEL-77322)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-16" date="1768219200">- add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098)
- fix building with latest openssl (RHEL-140619)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-17" date="1777896000">- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-18" date="1778500800">- rebuild</changelog>
</package>
<package pkgid="960614fa0189d0ad9b7c7529373875dcf9e2bffd015bf5c11e7d1182493c26de" name="dovecot-pgsql-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.3.16" rel="18.el9_8.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-12" date="1722859200">- fix crash when user has sieve script that includes two missing scripts (RHEL-37160)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-13" date="1722859201">- rebuild with updated tests</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-14" date="1724155200">- fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
- fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-15" date="1738756800">- fix sysusers config file name (RHEL-77322)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-16" date="1768219200">- add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098)
- fix building with latest openssl (RHEL-140619)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-17" date="1777896000">- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-18" date="1778500800">- rebuild</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.16-18.1" date="1782475200">- fix CVE-2026-42006: IMAP parser list_count_limit bypass via open
  parentheses (RHEL-188468)</changelog>
</package>
<package pkgid="624f6c58d81264f1622ab0936aa8955af8c0263ff4c8c11df37bcfe864102c6f" name="dovecot-pgsql-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.3.16" rel="18.el9_8"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-12" date="1722859200">- fix crash when user has sieve script that includes two missing scripts (RHEL-37160)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-13" date="1722859201">- rebuild with updated tests</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-14" date="1724155200">- fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
- fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-15" date="1738756800">- fix sysusers config file name (RHEL-77322)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-16" date="1768219200">- add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098)
- fix building with latest openssl (RHEL-140619)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-17" date="1777896000">- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-18" date="1778500800">- rebuild</changelog>
</package>
<package pkgid="322336365fea1ce95cf63340fd9862da01d531ffcc324f151ac0240f5a8089c1" name="dovecot-pigeonhole-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.3.16" rel="18.el9_8.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-12" date="1722859200">- fix crash when user has sieve script that includes two missing scripts (RHEL-37160)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-13" date="1722859201">- rebuild with updated tests</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-14" date="1724155200">- fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
- fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-15" date="1738756800">- fix sysusers config file name (RHEL-77322)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-16" date="1768219200">- add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098)
- fix building with latest openssl (RHEL-140619)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-17" date="1777896000">- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-18" date="1778500800">- rebuild</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.16-18.1" date="1782475200">- fix CVE-2026-42006: IMAP parser list_count_limit bypass via open
  parentheses (RHEL-188468)</changelog>
</package>
<package pkgid="1528642162c49b61c533c00eebb674ba2abc449d68eaeefff72b8d70b53d6b93" name="dovecot-pigeonhole-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.3.16" rel="18.el9_8"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-12" date="1722859200">- fix crash when user has sieve script that includes two missing scripts (RHEL-37160)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-13" date="1722859201">- rebuild with updated tests</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-14" date="1724155200">- fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
- fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-15" date="1738756800">- fix sysusers config file name (RHEL-77322)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-16" date="1768219200">- add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098)
- fix building with latest openssl (RHEL-140619)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-17" date="1777896000">- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.16-18" date="1778500800">- rebuild</changelog>
</package>
<package pkgid="fdeddaba920a3081433f930532208f5111fd2f6dea607786abd27ef7173c6107" name="dracut-debuginfo" arch="x86_64">
  <version epoch="0" ver="057" rel="110.git20260130.el9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-67.git20240812" date="1723464000">- feat(systemd): install systemd-executor
- test: use -device instead of -watchdog to remove qemu
- fix(fips): remove /dev/{random,urandom} pre-creation
- fix(systemd): always include sg module
- fix(fips): do not blindly remove /boot
- fix(github): update format of labeler
- fix(network-manager): add "After" dependency on dbus.service
- fix(url-lib.sh): nfs_already_mounted() with trailing slash in
- feat(systemd-pcrphase): introducing the systemd-pcrphase
- fix(systemd-pcrphase): only include
- fix(nfs): include also entries from /usr/lib/{passwd,group}</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-70.git20240819" date="1724068800">- fix(systemd): set right permissions for the machine-id file
- feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
- feat(dracut-init.sh): give --force-add precedence over --omit</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-79.git20241127" date="1732708800">- fix(35network-manager): install nftables kernel modules
- fix(35network-manager): install nft binary during module
- fix(dracut-install): copy xattr when use clone ioctl
- feat(dracut.sh): add --add-confdir option
- fix: typo in variable name
- feat(fips): add support for UKIs
- fix(kernel-modules): use modalias info in get_dev_module()
- fix(dracut-functions.sh): convert mmcblk to the real kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-86.git20250217" date="1739793600">- fix(35network-manager): remove duplicate installkernel
- feat(fips): include fips module unconditionally
- fix(dracut.sh): make omit-drivers option do exact match for
- feat: add openssl module</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-87.git20250311" date="1741694400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-90.git20250609" date="1749470400">- fix(dracut.sh): don't pass empty string as dir</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-101.git20250808" date="1754654400">- fix(systemd): add missing modprobe@.service
- fix: let check_vol_slaves_all return 1 when checks on all
- improvement(74nvmf): lookup required NIC kernel modules for
- fix(74nvmf): set root=nvmf
- chore(multipath): remove `rd_NO_MULTIPATH` kernel command
- refactor(multipath): remove custom multipathd.service
- fix(systemd): systemd.volatile needs overlayfs kernel module
- refactor(dracut): introduce clamp_mtimes helper function
- fix(dracut): ensure hardlink deduplication is reproducible</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-102.git20250818" date="1755518400">- fix(systemd): partial backport of</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-110.git20260130" date="1769774400">- fix(systemd-repart): allow partition format
- feat(install.d):according to the changes of
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
- fix(pcsc): add opensc load module file
- fix(pcsc): add --disable-polkit to pcscd.service
- fix(pkcs11): delete trailing dot on
- fix(multipath): disable user_friendly_names with mpathconf
  Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322</changelog>
</package>
<package pkgid="8d347296396a2076ae701550d78fc7f4f8dbdbdce6b802e186ab27a1d6c171b1" name="dracut-debuginfo" arch="x86_64">
  <version epoch="0" ver="057" rel="115.git20260527.el9_8"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-79.git20241127" date="1732708800">- fix(35network-manager): install nftables kernel modules
- fix(35network-manager): install nft binary during module
- fix(dracut-install): copy xattr when use clone ioctl
- feat(dracut.sh): add --add-confdir option
- fix: typo in variable name
- feat(fips): add support for UKIs
- fix(kernel-modules): use modalias info in get_dev_module()
- fix(dracut-functions.sh): convert mmcblk to the real kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-86.git20250217" date="1739793600">- fix(35network-manager): remove duplicate installkernel
- feat(fips): include fips module unconditionally
- fix(dracut.sh): make omit-drivers option do exact match for
- feat: add openssl module</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-87.git20250311" date="1741694400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-90.git20250609" date="1749470400">- fix(dracut.sh): don't pass empty string as dir</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-101.git20250808" date="1754654400">- fix(systemd): add missing modprobe@.service
- fix: let check_vol_slaves_all return 1 when checks on all
- improvement(74nvmf): lookup required NIC kernel modules for
- fix(74nvmf): set root=nvmf
- chore(multipath): remove `rd_NO_MULTIPATH` kernel command
- refactor(multipath): remove custom multipathd.service
- fix(systemd): systemd.volatile needs overlayfs kernel module
- refactor(dracut): introduce clamp_mtimes helper function
- fix(dracut): ensure hardlink deduplication is reproducible</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-102.git20250818" date="1755518400">- fix(systemd): partial backport of</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-110.git20260130" date="1769774400">- fix(systemd-repart): allow partition format
- feat(install.d):according to the changes of
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
- fix(pcsc): add opensc load module file
- fix(pcsc): add --disable-polkit to pcscd.service
- fix(pkcs11): delete trailing dot on
- fix(multipath): disable user_friendly_names with mpathconf
  Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-113.git20260502" date="1777723200">- fix(network-legacy): replace `echo` writes with `printf` to
- fix(iscsi): replace `echo` writes with `printf` to prevent
- fix(base): replace eval with safe variable indirection in
  Resolves: RHEL-170857</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-115.git20260514" date="1778760000">- fix(network): warn on suspicious shell metacharacters in
- fix(base): escape arguments in initqueue hook script
  Related: RHEL-170857</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-115.git20260527" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
</package>
<package pkgid="482c085c578728b8368683de936b293895c3b31d4f535fd1180984747aea57d0" name="dracut-debuginfo" arch="x86_64">
  <version epoch="0" ver="057" rel="117.git20260625.el9_8"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-86.git20250217" date="1739793600">- fix(35network-manager): remove duplicate installkernel
- feat(fips): include fips module unconditionally
- fix(dracut.sh): make omit-drivers option do exact match for
- feat: add openssl module</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-87.git20250311" date="1741694400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-90.git20250609" date="1749470400">- fix(dracut.sh): don't pass empty string as dir</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-101.git20250808" date="1754654400">- fix(systemd): add missing modprobe@.service
- fix: let check_vol_slaves_all return 1 when checks on all
- improvement(74nvmf): lookup required NIC kernel modules for
- fix(74nvmf): set root=nvmf
- chore(multipath): remove `rd_NO_MULTIPATH` kernel command
- refactor(multipath): remove custom multipathd.service
- fix(systemd): systemd.volatile needs overlayfs kernel module
- refactor(dracut): introduce clamp_mtimes helper function
- fix(dracut): ensure hardlink deduplication is reproducible</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-102.git20250818" date="1755518400">- fix(systemd): partial backport of</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-110.git20260130" date="1769774400">- fix(systemd-repart): allow partition format
- feat(install.d):according to the changes of
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
- fix(pcsc): add opensc load module file
- fix(pcsc): add --disable-polkit to pcscd.service
- fix(pkcs11): delete trailing dot on
- fix(multipath): disable user_friendly_names with mpathconf
  Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-113.git20260502" date="1777723200">- fix(network-legacy): replace `echo` writes with `printf` to
- fix(iscsi): replace `echo` writes with `printf` to prevent
- fix(base): replace eval with safe variable indirection in
  Resolves: RHEL-170857</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-115.git20260514" date="1778760000">- fix(network): warn on suspicious shell metacharacters in
- fix(base): escape arguments in initqueue hook script
  Related: RHEL-170857</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-115.git20260527" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-117.git20260625" date="1782388800">- revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless</changelog>
</package>
<package pkgid="c739301548f57504eded42a419f4505d881bb0240c7e5581801933996dd60b72" name="dracut-debuginfo" arch="x86_64">
  <version epoch="0" ver="057" rel="120.git20260728.el9_8"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-87.git20250311" date="1741694400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-90.git20250609" date="1749470400">- fix(dracut.sh): don't pass empty string as dir</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-101.git20250808" date="1754654400">- fix(systemd): add missing modprobe@.service
- fix: let check_vol_slaves_all return 1 when checks on all
- improvement(74nvmf): lookup required NIC kernel modules for
- fix(74nvmf): set root=nvmf
- chore(multipath): remove `rd_NO_MULTIPATH` kernel command
- refactor(multipath): remove custom multipathd.service
- fix(systemd): systemd.volatile needs overlayfs kernel module
- refactor(dracut): introduce clamp_mtimes helper function
- fix(dracut): ensure hardlink deduplication is reproducible</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-102.git20250818" date="1755518400">- fix(systemd): partial backport of</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-110.git20260130" date="1769774400">- fix(systemd-repart): allow partition format
- feat(install.d):according to the changes of
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
- fix(pcsc): add opensc load module file
- fix(pcsc): add --disable-polkit to pcscd.service
- fix(pkcs11): delete trailing dot on
- fix(multipath): disable user_friendly_names with mpathconf
  Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-113.git20260502" date="1777723200">- fix(network-legacy): replace `echo` writes with `printf` to
- fix(iscsi): replace `echo` writes with `printf` to prevent
- fix(base): replace eval with safe variable indirection in
  Resolves: RHEL-170857</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-115.git20260514" date="1778760000">- fix(network): warn on suspicious shell metacharacters in
- fix(base): escape arguments in initqueue hook script
  Related: RHEL-170857</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-115.git20260527" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-117.git20260625" date="1782388800">- revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-120.git20260728" date="1785240000">- fix(base): escape die() message in emergency hook script
- fix(base): replace eval with safe variable indirection in</changelog>
</package>
<package pkgid="c0c62af3d2543843fed38fd8a3fd744a0457a903d26d27aefabcec6d6c53eb83" name="dracut-debugsource" arch="x86_64">
  <version epoch="0" ver="057" rel="115.git20260527.el9_8"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-79.git20241127" date="1732708800">- fix(35network-manager): install nftables kernel modules
- fix(35network-manager): install nft binary during module
- fix(dracut-install): copy xattr when use clone ioctl
- feat(dracut.sh): add --add-confdir option
- fix: typo in variable name
- feat(fips): add support for UKIs
- fix(kernel-modules): use modalias info in get_dev_module()
- fix(dracut-functions.sh): convert mmcblk to the real kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-86.git20250217" date="1739793600">- fix(35network-manager): remove duplicate installkernel
- feat(fips): include fips module unconditionally
- fix(dracut.sh): make omit-drivers option do exact match for
- feat: add openssl module</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-87.git20250311" date="1741694400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-90.git20250609" date="1749470400">- fix(dracut.sh): don't pass empty string as dir</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-101.git20250808" date="1754654400">- fix(systemd): add missing modprobe@.service
- fix: let check_vol_slaves_all return 1 when checks on all
- improvement(74nvmf): lookup required NIC kernel modules for
- fix(74nvmf): set root=nvmf
- chore(multipath): remove `rd_NO_MULTIPATH` kernel command
- refactor(multipath): remove custom multipathd.service
- fix(systemd): systemd.volatile needs overlayfs kernel module
- refactor(dracut): introduce clamp_mtimes helper function
- fix(dracut): ensure hardlink deduplication is reproducible</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-102.git20250818" date="1755518400">- fix(systemd): partial backport of</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-110.git20260130" date="1769774400">- fix(systemd-repart): allow partition format
- feat(install.d):according to the changes of
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
- fix(pcsc): add opensc load module file
- fix(pcsc): add --disable-polkit to pcscd.service
- fix(pkcs11): delete trailing dot on
- fix(multipath): disable user_friendly_names with mpathconf
  Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-113.git20260502" date="1777723200">- fix(network-legacy): replace `echo` writes with `printf` to
- fix(iscsi): replace `echo` writes with `printf` to prevent
- fix(base): replace eval with safe variable indirection in
  Resolves: RHEL-170857</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-115.git20260514" date="1778760000">- fix(network): warn on suspicious shell metacharacters in
- fix(base): escape arguments in initqueue hook script
  Related: RHEL-170857</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-115.git20260527" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
</package>
<package pkgid="aea176ad83041a6acc45b196de775f3fc6e8b55a00427b60293496ddfd412a6f" name="dracut-debugsource" arch="x86_64">
  <version epoch="0" ver="057" rel="117.git20260625.el9_8"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-86.git20250217" date="1739793600">- fix(35network-manager): remove duplicate installkernel
- feat(fips): include fips module unconditionally
- fix(dracut.sh): make omit-drivers option do exact match for
- feat: add openssl module</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-87.git20250311" date="1741694400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-90.git20250609" date="1749470400">- fix(dracut.sh): don't pass empty string as dir</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-101.git20250808" date="1754654400">- fix(systemd): add missing modprobe@.service
- fix: let check_vol_slaves_all return 1 when checks on all
- improvement(74nvmf): lookup required NIC kernel modules for
- fix(74nvmf): set root=nvmf
- chore(multipath): remove `rd_NO_MULTIPATH` kernel command
- refactor(multipath): remove custom multipathd.service
- fix(systemd): systemd.volatile needs overlayfs kernel module
- refactor(dracut): introduce clamp_mtimes helper function
- fix(dracut): ensure hardlink deduplication is reproducible</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-102.git20250818" date="1755518400">- fix(systemd): partial backport of</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-110.git20260130" date="1769774400">- fix(systemd-repart): allow partition format
- feat(install.d):according to the changes of
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
- fix(pcsc): add opensc load module file
- fix(pcsc): add --disable-polkit to pcscd.service
- fix(pkcs11): delete trailing dot on
- fix(multipath): disable user_friendly_names with mpathconf
  Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-113.git20260502" date="1777723200">- fix(network-legacy): replace `echo` writes with `printf` to
- fix(iscsi): replace `echo` writes with `printf` to prevent
- fix(base): replace eval with safe variable indirection in
  Resolves: RHEL-170857</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-115.git20260514" date="1778760000">- fix(network): warn on suspicious shell metacharacters in
- fix(base): escape arguments in initqueue hook script
  Related: RHEL-170857</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-115.git20260527" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-117.git20260625" date="1782388800">- revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless</changelog>
</package>
<package pkgid="de554031a8cd00723e62d46428965a708b49a6e96a46b48e52ebfb3c294351ea" name="dracut-debugsource" arch="x86_64">
  <version epoch="0" ver="057" rel="120.git20260728.el9_8"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-87.git20250311" date="1741694400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-90.git20250609" date="1749470400">- fix(dracut.sh): don't pass empty string as dir</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-101.git20250808" date="1754654400">- fix(systemd): add missing modprobe@.service
- fix: let check_vol_slaves_all return 1 when checks on all
- improvement(74nvmf): lookup required NIC kernel modules for
- fix(74nvmf): set root=nvmf
- chore(multipath): remove `rd_NO_MULTIPATH` kernel command
- refactor(multipath): remove custom multipathd.service
- fix(systemd): systemd.volatile needs overlayfs kernel module
- refactor(dracut): introduce clamp_mtimes helper function
- fix(dracut): ensure hardlink deduplication is reproducible</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-102.git20250818" date="1755518400">- fix(systemd): partial backport of</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-110.git20260130" date="1769774400">- fix(systemd-repart): allow partition format
- feat(install.d):according to the changes of
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
- fix(pcsc): add opensc load module file
- fix(pcsc): add --disable-polkit to pcscd.service
- fix(pkcs11): delete trailing dot on
- fix(multipath): disable user_friendly_names with mpathconf
  Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-113.git20260502" date="1777723200">- fix(network-legacy): replace `echo` writes with `printf` to
- fix(iscsi): replace `echo` writes with `printf` to prevent
- fix(base): replace eval with safe variable indirection in
  Resolves: RHEL-170857</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-115.git20260514" date="1778760000">- fix(network): warn on suspicious shell metacharacters in
- fix(base): escape arguments in initqueue hook script
  Related: RHEL-170857</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-115.git20260527" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-117.git20260625" date="1782388800">- revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 057-120.git20260728" date="1785240000">- fix(base): escape die() message in emergency hook script
- fix(base): replace eval with safe variable indirection in</changelog>
</package>
<package pkgid="ba3b9a31bb3d18b9e77f4950d1c97a81dec5a2210ee6dc11fac3b7cb32a2c506" name="egl-wayland-debuginfo" arch="i686">
  <version epoch="0" ver="1.1.13.1" rel="3.el9_8"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.9-3" date="1715601600">- Rebuilt for RHEL-26187</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.13.1-1" date="1732017600">- Update to 1.1.13.1
  Resolves: https://issues.redhat.com/browse/RHEL-68048</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.13.1-3" date="1777377600">- Bump release</changelog>
</package>
<package pkgid="cd102babf0fef412f77f4284c38255052b713de7ef816a44cf0a0a29400e6775" name="egl-wayland-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13.1" rel="3.el9_8"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.9-3" date="1715601600">- Rebuilt for RHEL-26187</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.13.1-1" date="1732017600">- Update to 1.1.13.1
  Resolves: https://issues.redhat.com/browse/RHEL-68048</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.13.1-3" date="1777377600">- Bump release</changelog>
</package>
<package pkgid="0e7a1c630ff9792f13dcedd0b47523881a0a2ddb339da99f561ee0c9ab1f606d" name="egl-wayland-debuginfo" arch="i686">
  <version epoch="0" ver="1.1.13.1" rel="4.el9_8"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.13.1-1" date="1732017600">- Update to 1.1.13.1
  Resolves: https://issues.redhat.com/browse/RHEL-68048</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.13.1-3" date="1777377600">- Bump release</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.13.1-4" date="1784635200">- Don't install 15_nvidia_gbm.json</changelog>
</package>
<package pkgid="78f6776f490d1a5836e402c1e64c1ab9c64d9e0f84383b90583f8a3a1ecda806" name="egl-wayland-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13.1" rel="4.el9_8"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.13.1-1" date="1732017600">- Update to 1.1.13.1
  Resolves: https://issues.redhat.com/browse/RHEL-68048</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.13.1-3" date="1777377600">- Bump release</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.13.1-4" date="1784635200">- Don't install 15_nvidia_gbm.json</changelog>
</package>
<package pkgid="fa963faf888503b352e6ec692b5254d4c4effd465c8e3a71c62359698e77e2ce" name="egl-wayland-debugsource" arch="i686">
  <version epoch="0" ver="1.1.13.1" rel="3.el9_8"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.9-3" date="1715601600">- Rebuilt for RHEL-26187</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.13.1-1" date="1732017600">- Update to 1.1.13.1
  Resolves: https://issues.redhat.com/browse/RHEL-68048</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.13.1-3" date="1777377600">- Bump release</changelog>
</package>
<package pkgid="11366d5fdd97dd280f20bc8c030bfe227f4cae683a0ae04890cd8acb0afaf21b" name="egl-wayland-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.13.1" rel="3.el9_8"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.9-3" date="1715601600">- Rebuilt for RHEL-26187</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.13.1-1" date="1732017600">- Update to 1.1.13.1
  Resolves: https://issues.redhat.com/browse/RHEL-68048</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.13.1-3" date="1777377600">- Bump release</changelog>
</package>
<package pkgid="3f539a8f3d6e88f880cb146a533088ecdd53fae86fb0bf04e6a50b4c7705026f" name="egl-wayland-debugsource" arch="i686">
  <version epoch="0" ver="1.1.13.1" rel="4.el9_8"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.13.1-1" date="1732017600">- Update to 1.1.13.1
  Resolves: https://issues.redhat.com/browse/RHEL-68048</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.13.1-3" date="1777377600">- Bump release</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.13.1-4" date="1784635200">- Don't install 15_nvidia_gbm.json</changelog>
</package>
<package pkgid="c7b624519025ff303ce880a58ec6286e32cf55dc69979cec4123543a193be8ee" name="egl-wayland-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.13.1" rel="4.el9_8"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.13.1-1" date="1732017600">- Update to 1.1.13.1
  Resolves: https://issues.redhat.com/browse/RHEL-68048</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.13.1-3" date="1777377600">- Bump release</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.13.1-4" date="1784635200">- Don't install 15_nvidia_gbm.json</changelog>
</package>
<package pkgid="f81aa7e93451957e2c414fae8b7d7ecfd6f3d555107477df16e06c8ed51991bb" name="evince-debuginfo" arch="x86_64">
  <version epoch="0" ver="40.5" rel="4.el9_8.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-3" date="1747742400">- Allow launch action to open PDFs
- Resolves: RHEL-84038</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-4" date="1748606400">- Fix a leak
- Resolves: RHEL-84038</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-4.el9_8.1" date="1781611200">- Sanitize arguments (CVE-2026-46529)
- Resolves: RHEL-184047</changelog>
</package>
<package pkgid="c34cac5131a6f946a7b7705e19235d3842cac7b1f10b2f4c6b22bc96e5c13a69" name="evince-debugsource" arch="i686">
  <version epoch="0" ver="40.5" rel="4.el9_8.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-3" date="1747742400">- Allow launch action to open PDFs
- Resolves: RHEL-84038</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-4" date="1748606400">- Fix a leak
- Resolves: RHEL-84038</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-4.el9_8.1" date="1781611200">- Sanitize arguments (CVE-2026-46529)
- Resolves: RHEL-184047</changelog>
</package>
<package pkgid="1b8ce99f439fe09f911b658289b928ab11e0b92ac1f9f7dca4e4e2ee7dbf4e77" name="evince-debugsource" arch="x86_64">
  <version epoch="0" ver="40.5" rel="4.el9_8.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-3" date="1747742400">- Allow launch action to open PDFs
- Resolves: RHEL-84038</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-4" date="1748606400">- Fix a leak
- Resolves: RHEL-84038</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-4.el9_8.1" date="1781611200">- Sanitize arguments (CVE-2026-46529)
- Resolves: RHEL-184047</changelog>
</package>
<package pkgid="141804e70d0ddc182c1ad8955866fd7a53da0462005a9e94e8718d582cdf5241" name="evince-libs-debuginfo" arch="i686">
  <version epoch="0" ver="40.5" rel="4.el9_8.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-3" date="1747742400">- Allow launch action to open PDFs
- Resolves: RHEL-84038</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-4" date="1748606400">- Fix a leak
- Resolves: RHEL-84038</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-4.el9_8.1" date="1781611200">- Sanitize arguments (CVE-2026-46529)
- Resolves: RHEL-184047</changelog>
</package>
<package pkgid="438ae8d6a7e135d5715349701bfaf36f6c419b89dda24cd106a9a1219fedab10" name="evince-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="40.5" rel="4.el9_8.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-3" date="1747742400">- Allow launch action to open PDFs
- Resolves: RHEL-84038</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-4" date="1748606400">- Fix a leak
- Resolves: RHEL-84038</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-4.el9_8.1" date="1781611200">- Sanitize arguments (CVE-2026-46529)
- Resolves: RHEL-184047</changelog>
</package>
<package pkgid="cfa29044ee4b89de888ecf811b75778e8a33efff9ec26d5ed52cb580887a195d" name="evince-nautilus-debuginfo" arch="x86_64">
  <version epoch="0" ver="40.5" rel="4.el9_8.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-3" date="1747742400">- Allow launch action to open PDFs
- Resolves: RHEL-84038</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-4" date="1748606400">- Fix a leak
- Resolves: RHEL-84038</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-4.el9_8.1" date="1781611200">- Sanitize arguments (CVE-2026-46529)
- Resolves: RHEL-184047</changelog>
</package>
<package pkgid="73360b22a9f94a319016b65c6b2ae5e40a7107ec32d20c08270534aa212adc3f" name="evince-previewer-debuginfo" arch="x86_64">
  <version epoch="0" ver="40.5" rel="4.el9_8.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-3" date="1747742400">- Allow launch action to open PDFs
- Resolves: RHEL-84038</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-4" date="1748606400">- Fix a leak
- Resolves: RHEL-84038</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-4.el9_8.1" date="1781611200">- Sanitize arguments (CVE-2026-46529)
- Resolves: RHEL-184047</changelog>
</package>
<package pkgid="67291926db8eb055e6dfbab8138370c02d97c271d3ac0b338d2fced17621cea0" name="evince-thumbnailer-debuginfo" arch="x86_64">
  <version epoch="0" ver="40.5" rel="4.el9_8.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-3" date="1747742400">- Allow launch action to open PDFs
- Resolves: RHEL-84038</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-4" date="1748606400">- Fix a leak
- Resolves: RHEL-84038</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-4.el9_8.1" date="1781611200">- Sanitize arguments (CVE-2026-46529)
- Resolves: RHEL-184047</changelog>
</package>
<package pkgid="e8d37df0dd183a5240af96fd18f7388074391a0815222a073094a57e39e3910b" name="expat-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.0" rel="6.el9_8.1"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-3" date="1728475200">- Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
- Resolves: RHEL-56761
- Resolves: RHEL-57520
- Resolves: RHEL-57511</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-4" date="1730980800">- Fix CVE-2024-50602
- Resolves: RHEL-65066</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-5" date="1743422400">- Fix CVE-2024-8176
- Resolves: RHEL-57489</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-6" date="1764676800">- Fix CVE-2025-59375
- Resolves: RHEL-114643</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.5.0-6.1" date="1779883200">- Fix CVE-2026-45186
- Resolves: RHEL-177988</changelog>
</package>
<package pkgid="cb3dfcae12161b157e61c2820c5c764d371b7cec42de1c263b73e96d6d477f9b" name="expat-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="6.el9_8.1"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-3" date="1728475200">- Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
- Resolves: RHEL-56761
- Resolves: RHEL-57520
- Resolves: RHEL-57511</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-4" date="1730980800">- Fix CVE-2024-50602
- Resolves: RHEL-65066</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-5" date="1743422400">- Fix CVE-2024-8176
- Resolves: RHEL-57489</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-6" date="1764676800">- Fix CVE-2025-59375
- Resolves: RHEL-114643</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.5.0-6.1" date="1779883200">- Fix CVE-2026-45186
- Resolves: RHEL-177988</changelog>
</package>
<package pkgid="60ac4433630826e209f6c44a36d5de5d177c4bc3b577efaf334975a5b35e6ebf" name="expat-debugsource" arch="i686">
  <version epoch="0" ver="2.5.0" rel="6.el9_8.1"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-3" date="1728475200">- Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
- Resolves: RHEL-56761
- Resolves: RHEL-57520
- Resolves: RHEL-57511</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-4" date="1730980800">- Fix CVE-2024-50602
- Resolves: RHEL-65066</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-5" date="1743422400">- Fix CVE-2024-8176
- Resolves: RHEL-57489</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-6" date="1764676800">- Fix CVE-2025-59375
- Resolves: RHEL-114643</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.5.0-6.1" date="1779883200">- Fix CVE-2026-45186
- Resolves: RHEL-177988</changelog>
</package>
<package pkgid="e0c50307e4239585e0e5ee31bec085cb800c214442422f676205b018d4372c4a" name="expat-debugsource" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="6.el9_8.1"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-3" date="1728475200">- Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
- Resolves: RHEL-56761
- Resolves: RHEL-57520
- Resolves: RHEL-57511</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-4" date="1730980800">- Fix CVE-2024-50602
- Resolves: RHEL-65066</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-5" date="1743422400">- Fix CVE-2024-8176
- Resolves: RHEL-57489</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-6" date="1764676800">- Fix CVE-2025-59375
- Resolves: RHEL-114643</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.5.0-6.1" date="1779883200">- Fix CVE-2026-45186
- Resolves: RHEL-177988</changelog>
</package>
<package pkgid="4513fe6c40d1db8a74519ff6cf4e1cc3cbde133f20a06aa99981887adeff3c57" name="fence-agents-debugsource" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-101" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128926</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-102" date="1767355200">- bundled urllib3: fix CVE-2025-66418
  Resolves: RHEL-136069</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768910400">- bundled urllib3: fix CVE-2025-66471
- bundled urllib3: fix CVE-2026-21441
  Resolves: RHEL-139799, RHEL-140796</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
</package>
<package pkgid="b97b23a7554496b6760cabfb09e6621f8222ebb11ff98391ff34d2c87e36c35a" name="fence-agents-debugsource" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768910400">- bundled urllib3: fix CVE-2025-66471
- bundled urllib3: fix CVE-2026-21441
  Resolves: RHEL-139799, RHEL-140796</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
  <changelog author="Arslan Ahmad &lt;arahmad@redhat.com&gt; - 4.10.0-110.4" date="1782129600">- fence_openstack: fix list-action to avoid timeout when
  there are 100+ VMs on the hypervisor
  Resolves: RHEL-186320</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.5" date="1784116800">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193808</changelog>
</package>
<package pkgid="d234744cf205a32b93cdec8a9cb8da81b23ee4dfae73e66fefbddbc421714f53" name="fence-agents-debugsource" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
  <changelog author="Arslan Ahmad &lt;arahmad@redhat.com&gt; - 4.10.0-110.4" date="1782129600">- fence_openstack: fix list-action to avoid timeout when
  there are 100+ VMs on the hypervisor
  Resolves: RHEL-186320</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.5" date="1784116800">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193808</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.6" date="1785412800">- bundled pyasn1: fix CVE-2026-59886
  Resolves: RHEL-217934</changelog>
</package>
<package pkgid="814b79550e935dfbced0b38f3402b4cc5ce3fb47f910d3ad1699f8563a79c4bf" name="fence-agents-kdump-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-101" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128926</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-102" date="1767355200">- bundled urllib3: fix CVE-2025-66418
  Resolves: RHEL-136069</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768910400">- bundled urllib3: fix CVE-2025-66471
- bundled urllib3: fix CVE-2026-21441
  Resolves: RHEL-139799, RHEL-140796</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
</package>
<package pkgid="e65adca83d591c78efaa67ed7bff29528c7b85486d42d7e96587e4e7f464600d" name="fence-agents-kdump-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768910400">- bundled urllib3: fix CVE-2025-66471
- bundled urllib3: fix CVE-2026-21441
  Resolves: RHEL-139799, RHEL-140796</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
  <changelog author="Arslan Ahmad &lt;arahmad@redhat.com&gt; - 4.10.0-110.4" date="1782129600">- fence_openstack: fix list-action to avoid timeout when
  there are 100+ VMs on the hypervisor
  Resolves: RHEL-186320</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.5" date="1784116800">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193808</changelog>
</package>
<package pkgid="09e0df7f7ae6f0014f642ee509026b7a7444195e3d78484e78e1138a06ca3510" name="fence-agents-kdump-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
  <changelog author="Arslan Ahmad &lt;arahmad@redhat.com&gt; - 4.10.0-110.4" date="1782129600">- fence_openstack: fix list-action to avoid timeout when
  there are 100+ VMs on the hypervisor
  Resolves: RHEL-186320</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.5" date="1784116800">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193808</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.6" date="1785412800">- bundled pyasn1: fix CVE-2026-59886
  Resolves: RHEL-217934</changelog>
</package>
<package pkgid="f1dac97163fadfc8bfac95478cf7bdedc5a76175bc9f6979cabd6c7cc6527155" name="fence-agents-kubevirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-101" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128926</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-102" date="1767355200">- bundled urllib3: fix CVE-2025-66418
  Resolves: RHEL-136069</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768910400">- bundled urllib3: fix CVE-2025-66471
- bundled urllib3: fix CVE-2026-21441
  Resolves: RHEL-139799, RHEL-140796</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
</package>
<package pkgid="0d6d475350252ce0c81e911e303fb543d620e25b4a88d79b8b758e544a1d4834" name="fence-agents-kubevirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768910400">- bundled urllib3: fix CVE-2025-66471
- bundled urllib3: fix CVE-2026-21441
  Resolves: RHEL-139799, RHEL-140796</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
  <changelog author="Arslan Ahmad &lt;arahmad@redhat.com&gt; - 4.10.0-110.4" date="1782129600">- fence_openstack: fix list-action to avoid timeout when
  there are 100+ VMs on the hypervisor
  Resolves: RHEL-186320</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.5" date="1784116800">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193808</changelog>
</package>
<package pkgid="fecdb24407b4d73fb95bb7cf0e482a18fce344762d6626f5637e676ca55048e8" name="fence-agents-kubevirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
  <changelog author="Arslan Ahmad &lt;arahmad@redhat.com&gt; - 4.10.0-110.4" date="1782129600">- fence_openstack: fix list-action to avoid timeout when
  there are 100+ VMs on the hypervisor
  Resolves: RHEL-186320</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.5" date="1784116800">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193808</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.6" date="1785412800">- bundled pyasn1: fix CVE-2026-59886
  Resolves: RHEL-217934</changelog>
</package>
<package pkgid="84f403c8c14ba19844fac9634f4bcb4b0efee398894708b16e6fe2e305c46256" name="fence-virt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-101" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128926</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-102" date="1767355200">- bundled urllib3: fix CVE-2025-66418
  Resolves: RHEL-136069</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768910400">- bundled urllib3: fix CVE-2025-66471
- bundled urllib3: fix CVE-2026-21441
  Resolves: RHEL-139799, RHEL-140796</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
</package>
<package pkgid="86057c26057318fb6729187f88f0c1afb9b867a62343d3b76af9943c6bb2134e" name="fence-virt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768910400">- bundled urllib3: fix CVE-2025-66471
- bundled urllib3: fix CVE-2026-21441
  Resolves: RHEL-139799, RHEL-140796</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
  <changelog author="Arslan Ahmad &lt;arahmad@redhat.com&gt; - 4.10.0-110.4" date="1782129600">- fence_openstack: fix list-action to avoid timeout when
  there are 100+ VMs on the hypervisor
  Resolves: RHEL-186320</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.5" date="1784116800">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193808</changelog>
</package>
<package pkgid="78651f7c7d227b706bbb51b6b0a5ec2887e2ed2eac9652a5e2958205e0a82bf9" name="fence-virt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
  <changelog author="Arslan Ahmad &lt;arahmad@redhat.com&gt; - 4.10.0-110.4" date="1782129600">- fence_openstack: fix list-action to avoid timeout when
  there are 100+ VMs on the hypervisor
  Resolves: RHEL-186320</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.5" date="1784116800">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193808</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.6" date="1785412800">- bundled pyasn1: fix CVE-2026-59886
  Resolves: RHEL-217934</changelog>
</package>
<package pkgid="f163f5bb2b9d5eb249e9bf8aec3bf965e0c27ba8ff5bc4d5c048561111c25b9a" name="fence-virtd-cpg-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-101" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128926</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-102" date="1767355200">- bundled urllib3: fix CVE-2025-66418
  Resolves: RHEL-136069</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768910400">- bundled urllib3: fix CVE-2025-66471
- bundled urllib3: fix CVE-2026-21441
  Resolves: RHEL-139799, RHEL-140796</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
</package>
<package pkgid="c85fef439fc4971572a149613745a1fd47707dc2e6b4517457dfc11f8067b51a" name="fence-virtd-cpg-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768910400">- bundled urllib3: fix CVE-2025-66471
- bundled urllib3: fix CVE-2026-21441
  Resolves: RHEL-139799, RHEL-140796</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
  <changelog author="Arslan Ahmad &lt;arahmad@redhat.com&gt; - 4.10.0-110.4" date="1782129600">- fence_openstack: fix list-action to avoid timeout when
  there are 100+ VMs on the hypervisor
  Resolves: RHEL-186320</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.5" date="1784116800">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193808</changelog>
</package>
<package pkgid="7f9fddd660e265f364a323a1cd0ea90a70421576b560ee35edfbc703b139d75c" name="fence-virtd-cpg-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
  <changelog author="Arslan Ahmad &lt;arahmad@redhat.com&gt; - 4.10.0-110.4" date="1782129600">- fence_openstack: fix list-action to avoid timeout when
  there are 100+ VMs on the hypervisor
  Resolves: RHEL-186320</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.5" date="1784116800">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193808</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.6" date="1785412800">- bundled pyasn1: fix CVE-2026-59886
  Resolves: RHEL-217934</changelog>
</package>
<package pkgid="e8d5738425bb3bfe7f2ecadbf2e8288d860c7c661aedb2098f4095f8e28ece58" name="fence-virtd-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-101" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128926</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-102" date="1767355200">- bundled urllib3: fix CVE-2025-66418
  Resolves: RHEL-136069</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768910400">- bundled urllib3: fix CVE-2025-66471
- bundled urllib3: fix CVE-2026-21441
  Resolves: RHEL-139799, RHEL-140796</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
</package>
<package pkgid="868d6971c7bb2c1cb1829e451de400b5dadae0bb7d82ef16597ab6a37e761d35" name="fence-virtd-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768910400">- bundled urllib3: fix CVE-2025-66471
- bundled urllib3: fix CVE-2026-21441
  Resolves: RHEL-139799, RHEL-140796</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
  <changelog author="Arslan Ahmad &lt;arahmad@redhat.com&gt; - 4.10.0-110.4" date="1782129600">- fence_openstack: fix list-action to avoid timeout when
  there are 100+ VMs on the hypervisor
  Resolves: RHEL-186320</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.5" date="1784116800">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193808</changelog>
</package>
<package pkgid="5df6f4569c44a3cffe3f92d5c80b5305e7fcb052a34d340ad697fe56353a5480" name="fence-virtd-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
  <changelog author="Arslan Ahmad &lt;arahmad@redhat.com&gt; - 4.10.0-110.4" date="1782129600">- fence_openstack: fix list-action to avoid timeout when
  there are 100+ VMs on the hypervisor
  Resolves: RHEL-186320</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.5" date="1784116800">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193808</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.6" date="1785412800">- bundled pyasn1: fix CVE-2026-59886
  Resolves: RHEL-217934</changelog>
</package>
<package pkgid="5328ee668a456f1f82addc3a6e9c06eb8b6261a4b4e61b231c00d822e600b2e9" name="fence-virtd-libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-101" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128926</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-102" date="1767355200">- bundled urllib3: fix CVE-2025-66418
  Resolves: RHEL-136069</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768910400">- bundled urllib3: fix CVE-2025-66471
- bundled urllib3: fix CVE-2026-21441
  Resolves: RHEL-139799, RHEL-140796</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
</package>
<package pkgid="5f16153365be5b219ed2ac5f7ae1a77c0ac04ced096d93be0e18c7e81116bdfd" name="fence-virtd-libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768910400">- bundled urllib3: fix CVE-2025-66471
- bundled urllib3: fix CVE-2026-21441
  Resolves: RHEL-139799, RHEL-140796</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
  <changelog author="Arslan Ahmad &lt;arahmad@redhat.com&gt; - 4.10.0-110.4" date="1782129600">- fence_openstack: fix list-action to avoid timeout when
  there are 100+ VMs on the hypervisor
  Resolves: RHEL-186320</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.5" date="1784116800">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193808</changelog>
</package>
<package pkgid="659886d92dcce525da2c02d453a0e540ed155cb17d031ba267b8ccffaabeb2d5" name="fence-virtd-libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
  <changelog author="Arslan Ahmad &lt;arahmad@redhat.com&gt; - 4.10.0-110.4" date="1782129600">- fence_openstack: fix list-action to avoid timeout when
  there are 100+ VMs on the hypervisor
  Resolves: RHEL-186320</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.5" date="1784116800">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193808</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.6" date="1785412800">- bundled pyasn1: fix CVE-2026-59886
  Resolves: RHEL-217934</changelog>
</package>
<package pkgid="56c88e3857a6bee59a6127e105bfaadefa35d15962c5e57ecc33dd9dade194cc" name="fence-virtd-multicast-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-101" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128926</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-102" date="1767355200">- bundled urllib3: fix CVE-2025-66418
  Resolves: RHEL-136069</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768910400">- bundled urllib3: fix CVE-2025-66471
- bundled urllib3: fix CVE-2026-21441
  Resolves: RHEL-139799, RHEL-140796</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
</package>
<package pkgid="a48cada261968914fcf4eefb15008bbc3d7d5642e6fccecd5c14d6e317acd35e" name="fence-virtd-multicast-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768910400">- bundled urllib3: fix CVE-2025-66471
- bundled urllib3: fix CVE-2026-21441
  Resolves: RHEL-139799, RHEL-140796</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
  <changelog author="Arslan Ahmad &lt;arahmad@redhat.com&gt; - 4.10.0-110.4" date="1782129600">- fence_openstack: fix list-action to avoid timeout when
  there are 100+ VMs on the hypervisor
  Resolves: RHEL-186320</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.5" date="1784116800">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193808</changelog>
</package>
<package pkgid="f3c50d10f0081f787b9261d2a1d6b0588861435fd182fc001fcfe56c35b64144" name="fence-virtd-multicast-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
  <changelog author="Arslan Ahmad &lt;arahmad@redhat.com&gt; - 4.10.0-110.4" date="1782129600">- fence_openstack: fix list-action to avoid timeout when
  there are 100+ VMs on the hypervisor
  Resolves: RHEL-186320</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.5" date="1784116800">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193808</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.6" date="1785412800">- bundled pyasn1: fix CVE-2026-59886
  Resolves: RHEL-217934</changelog>
</package>
<package pkgid="fa6f651ce4c2c7832f4461173c686080231883f38fe92e3fc97f97ec3500c7d3" name="fence-virtd-serial-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-101" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128926</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-102" date="1767355200">- bundled urllib3: fix CVE-2025-66418
  Resolves: RHEL-136069</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768910400">- bundled urllib3: fix CVE-2025-66471
- bundled urllib3: fix CVE-2026-21441
  Resolves: RHEL-139799, RHEL-140796</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
</package>
<package pkgid="491e3f466da80fbf2a77908fceaa6a4f4894d088cbfd619a4d0a628d546c80b3" name="fence-virtd-serial-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768910400">- bundled urllib3: fix CVE-2025-66471
- bundled urllib3: fix CVE-2026-21441
  Resolves: RHEL-139799, RHEL-140796</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
  <changelog author="Arslan Ahmad &lt;arahmad@redhat.com&gt; - 4.10.0-110.4" date="1782129600">- fence_openstack: fix list-action to avoid timeout when
  there are 100+ VMs on the hypervisor
  Resolves: RHEL-186320</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.5" date="1784116800">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193808</changelog>
</package>
<package pkgid="02b9717556f820f97b464a11c452c7141760fe987f7f87cb4a29ac233183b659" name="fence-virtd-serial-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
  <changelog author="Arslan Ahmad &lt;arahmad@redhat.com&gt; - 4.10.0-110.4" date="1782129600">- fence_openstack: fix list-action to avoid timeout when
  there are 100+ VMs on the hypervisor
  Resolves: RHEL-186320</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.5" date="1784116800">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193808</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.6" date="1785412800">- bundled pyasn1: fix CVE-2026-59886
  Resolves: RHEL-217934</changelog>
</package>
<package pkgid="5e2645210827af41585834801d23db87c4249cd8b1c7407e68f0bf9dfb5229e5" name="fence-virtd-tcp-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-101" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128926</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-102" date="1767355200">- bundled urllib3: fix CVE-2025-66418
  Resolves: RHEL-136069</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768910400">- bundled urllib3: fix CVE-2025-66471
- bundled urllib3: fix CVE-2026-21441
  Resolves: RHEL-139799, RHEL-140796</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
</package>
<package pkgid="6ea356a5bda58531374847034c1adaa445566abf42a78d803bd2dd2e57027efb" name="fence-virtd-tcp-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768910400">- bundled urllib3: fix CVE-2025-66471
- bundled urllib3: fix CVE-2026-21441
  Resolves: RHEL-139799, RHEL-140796</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
  <changelog author="Arslan Ahmad &lt;arahmad@redhat.com&gt; - 4.10.0-110.4" date="1782129600">- fence_openstack: fix list-action to avoid timeout when
  there are 100+ VMs on the hypervisor
  Resolves: RHEL-186320</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.5" date="1784116800">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193808</changelog>
</package>
<package pkgid="af04fe25b494e11b72ad39ab0c59b70efdb4a3b8ba4d87188d5ec29e4dccddf0" name="fence-virtd-tcp-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
  <changelog author="Arslan Ahmad &lt;arahmad@redhat.com&gt; - 4.10.0-110.4" date="1782129600">- fence_openstack: fix list-action to avoid timeout when
  there are 100+ VMs on the hypervisor
  Resolves: RHEL-186320</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.5" date="1784116800">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193808</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.6" date="1785412800">- bundled pyasn1: fix CVE-2026-59886
  Resolves: RHEL-217934</changelog>
</package>
<package pkgid="395194ba3537bfbb5e4e2d7346d9c837d199b8d12ca980063e1a14162f76f3b8" name="file-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.39" rel="17.el9"/>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 5.39-17" date="1771848000">- Fix TypeError: 'NoneType' object is not callable in magic.close()
  Resolves: RHEL-136523</changelog>
</package>
<package pkgid="0c19d6e3644b920e3943d393df1c79668a119ac0707e84bd77379d7261bb95ca" name="file-libs-debuginfo" arch="i686">
  <version epoch="0" ver="5.39" rel="17.el9"/>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 5.39-17" date="1771848000">- Fix TypeError: 'NoneType' object is not callable in magic.close()
  Resolves: RHEL-136523</changelog>
</package>
<package pkgid="06d607ee95b9ecc32e94740892bfa112924d6758ba68be68c772a23b1f77c5f1" name="file-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.39" rel="17.el9"/>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 5.39-17" date="1771848000">- Fix TypeError: 'NoneType' object is not callable in magic.close()
  Resolves: RHEL-136523</changelog>
</package>
<package pkgid="3764d01770404fe9bccb870b3fccbe704ec731846ad4d2b2304d5e1c082bec9a" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="140.12.0" rel="1.el9_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.7.0-1" date="1767787200">- Update to 140.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.8.0-2" date="1771329600">- Update to 140.8.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.0-1" date="1773835200">- Update to 140.9.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.1-1" date="1775649600">- Update to 140.9.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.0-1" date="1776340800">- Update to 140.10.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.1-1" date="1778068800">- Update to 140.10.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.2-1" date="1778760000">- Update to 140.10.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.11.0-1" date="1779278400">- Update to 140.11.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.12.0-1" date="1781092800">- Update to 140.12.0 ESR</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 140.12.0-1" date="1782216000">- Add custom Rocky Linux firefox prefs (Louis Abel)
- Ensure mozilla API key is set for Rocky Linux (Mustafa Gezen)
- Ensure s390x and riscv64 are locked to 3 CPU's (Louis Abel)</changelog>
</package>
<package pkgid="dde083ec9f055c08f996d8cce8d999a1b0f13c01d2c0dedbb430419691a3cd51" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="140.13.0" rel="1.el9_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.8.0-2" date="1771329600">- Update to 140.8.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.0-1" date="1773835200">- Update to 140.9.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.1-1" date="1775649600">- Update to 140.9.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.0-1" date="1776340800">- Update to 140.10.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.1-1" date="1778068800">- Update to 140.10.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.2-1" date="1778760000">- Update to 140.10.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.11.0-1" date="1779278400">- Update to 140.11.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.12.0-1" date="1781092800">- Update to 140.12.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.13.0-1" date="1784203200">- Update to 140.13.0 ESR</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 140.13.0-1" date="1785326400">- Add custom Rocky Linux firefox prefs (Louis Abel)
- Ensure mozilla API key is set for Rocky Linux (Mustafa Gezen)
- Ensure s390x and riscv64 are locked to 3 CPU's (Louis Abel)</changelog>
</package>
<package pkgid="e354498069f2a66e7cf62b9526f18112ecba3dc3d3227b3efed6aa2ebeade2df" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="140.9.0" rel="1.el9_7"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 128.14.0-1" date="1755000000">- Update to 128.14.0 build1</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 128.14.0-2" date="1755259200">- Add missing translations</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.3.0-1" date="1757505600">- Update to 140.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.4.0-3" date="1760097600">- Update to 140.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.5.0-1" date="1762516800">- Update to 140.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.6.0-1" date="1764676800">- Update to 140.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.7.0-1" date="1767787200">- Update to 140.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.8.0-2" date="1771329600">- Update to 140.8.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.0-1" date="1773835200">- Update to 140.9.0 ESR</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 140.9.0-1" date="1775217600">- Add custom Rocky Linux firefox prefs (Louis Abel)
- Ensure mozilla API key is set for Rocky Linux (Mustafa Gezen)
- Ensure s390x and riscv64 are locked to 3 CPU's (Louis Abel)</changelog>
</package>
<package pkgid="71a2159dd58cf66ea7eb7bbfae64e021e529de0ce2ab0ceb9a7a3a28cf64b603" name="firefox-debugsource" arch="x86_64">
  <version epoch="0" ver="140.12.0" rel="1.el9_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.7.0-1" date="1767787200">- Update to 140.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.8.0-2" date="1771329600">- Update to 140.8.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.0-1" date="1773835200">- Update to 140.9.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.1-1" date="1775649600">- Update to 140.9.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.0-1" date="1776340800">- Update to 140.10.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.1-1" date="1778068800">- Update to 140.10.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.2-1" date="1778760000">- Update to 140.10.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.11.0-1" date="1779278400">- Update to 140.11.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.12.0-1" date="1781092800">- Update to 140.12.0 ESR</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 140.12.0-1" date="1782216000">- Add custom Rocky Linux firefox prefs (Louis Abel)
- Ensure mozilla API key is set for Rocky Linux (Mustafa Gezen)
- Ensure s390x and riscv64 are locked to 3 CPU's (Louis Abel)</changelog>
</package>
<package pkgid="f594168877de749aea0affc782dbfe9cfdd1e80e4779cffba6fbeae0537bab65" name="firefox-debugsource" arch="x86_64">
  <version epoch="0" ver="140.13.0" rel="1.el9_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.8.0-2" date="1771329600">- Update to 140.8.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.0-1" date="1773835200">- Update to 140.9.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.1-1" date="1775649600">- Update to 140.9.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.0-1" date="1776340800">- Update to 140.10.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.1-1" date="1778068800">- Update to 140.10.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.2-1" date="1778760000">- Update to 140.10.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.11.0-1" date="1779278400">- Update to 140.11.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.12.0-1" date="1781092800">- Update to 140.12.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.13.0-1" date="1784203200">- Update to 140.13.0 ESR</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 140.13.0-1" date="1785326400">- Add custom Rocky Linux firefox prefs (Louis Abel)
- Ensure mozilla API key is set for Rocky Linux (Mustafa Gezen)
- Ensure s390x and riscv64 are locked to 3 CPU's (Louis Abel)</changelog>
</package>
<package pkgid="afaae79efe9747a233750681325cd633f801f8fd256bdb67745209dec806914d" name="firefox-debugsource" arch="x86_64">
  <version epoch="0" ver="140.9.0" rel="1.el9_7"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 128.14.0-1" date="1755000000">- Update to 128.14.0 build1</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 128.14.0-2" date="1755259200">- Add missing translations</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.3.0-1" date="1757505600">- Update to 140.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.4.0-3" date="1760097600">- Update to 140.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.5.0-1" date="1762516800">- Update to 140.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.6.0-1" date="1764676800">- Update to 140.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.7.0-1" date="1767787200">- Update to 140.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.8.0-2" date="1771329600">- Update to 140.8.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.0-1" date="1773835200">- Update to 140.9.0 ESR</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 140.9.0-1" date="1775217600">- Add custom Rocky Linux firefox prefs (Louis Abel)
- Ensure mozilla API key is set for Rocky Linux (Mustafa Gezen)
- Ensure s390x and riscv64 are locked to 3 CPU's (Louis Abel)</changelog>
</package>
<package pkgid="0c63ab7b06b371a7fa3c638d080d0253354449210ec42c21ec7243311b66e760" name="flatpak-debuginfo" arch="i686">
  <version epoch="0" ver="1.12.9" rel="4.el9_8.1"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.12.9-2" date="1725278400">- Backport upstream patches for CVE-2024-42472
- Require bubblewrap version that has new --bind-fd option backported for
  addressing CVE-2024-42472</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.12.9-3" date="1725451200">- Fix previous changelog entry</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.12.9-4" date="1741348800">- Use sysusers_create_compat macro to create user &amp; group
Resolves: RHEL-82605</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.12.9-4.1" date="1779278400">- Fix arbitrary code execution via crafted symlinks in sandbox-expose options
  Resolves: RHEL-165643
- Fix arbitrary file deletion on host via improper cache file path validation
  Resolves: RHEL-170171</changelog>
</package>
<package pkgid="8b3ab40948b649bd7f9a5f48e54c442b683b4b20f03330be797f9043d1fb6665" name="flatpak-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.12.9" rel="4.el9_8.1"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.12.9-2" date="1725278400">- Backport upstream patches for CVE-2024-42472
- Require bubblewrap version that has new --bind-fd option backported for
  addressing CVE-2024-42472</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.12.9-3" date="1725451200">- Fix previous changelog entry</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.12.9-4" date="1741348800">- Use sysusers_create_compat macro to create user &amp; group
Resolves: RHEL-82605</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.12.9-4.1" date="1779278400">- Fix arbitrary code execution via crafted symlinks in sandbox-expose options
  Resolves: RHEL-165643
- Fix arbitrary file deletion on host via improper cache file path validation
  Resolves: RHEL-170171</changelog>
</package>
<package pkgid="534c4c6e678466e8659bfee49bd6d1b6d297cd470edcb77b7d942aa24554f32c" name="flatpak-debugsource" arch="i686">
  <version epoch="0" ver="1.12.9" rel="4.el9_8.1"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.12.9-2" date="1725278400">- Backport upstream patches for CVE-2024-42472
- Require bubblewrap version that has new --bind-fd option backported for
  addressing CVE-2024-42472</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.12.9-3" date="1725451200">- Fix previous changelog entry</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.12.9-4" date="1741348800">- Use sysusers_create_compat macro to create user &amp; group
Resolves: RHEL-82605</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.12.9-4.1" date="1779278400">- Fix arbitrary code execution via crafted symlinks in sandbox-expose options
  Resolves: RHEL-165643
- Fix arbitrary file deletion on host via improper cache file path validation
  Resolves: RHEL-170171</changelog>
</package>
<package pkgid="34663b5ab8cdd454b9e4891d6d76b2a731fe7516e47c84d311877a94e87465bd" name="flatpak-debugsource" arch="x86_64">
  <version epoch="0" ver="1.12.9" rel="4.el9_8.1"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.12.9-2" date="1725278400">- Backport upstream patches for CVE-2024-42472
- Require bubblewrap version that has new --bind-fd option backported for
  addressing CVE-2024-42472</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.12.9-3" date="1725451200">- Fix previous changelog entry</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.12.9-4" date="1741348800">- Use sysusers_create_compat macro to create user &amp; group
Resolves: RHEL-82605</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.12.9-4.1" date="1779278400">- Fix arbitrary code execution via crafted symlinks in sandbox-expose options
  Resolves: RHEL-165643
- Fix arbitrary file deletion on host via improper cache file path validation
  Resolves: RHEL-170171</changelog>
</package>
<package pkgid="6128c7fecef6296d310bf64a9a4b0e9b3452765c962f2ca4501cd8148fe8511c" name="flatpak-libs-debuginfo" arch="i686">
  <version epoch="0" ver="1.12.9" rel="4.el9_8.1"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.12.9-2" date="1725278400">- Backport upstream patches for CVE-2024-42472
- Require bubblewrap version that has new --bind-fd option backported for
  addressing CVE-2024-42472</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.12.9-3" date="1725451200">- Fix previous changelog entry</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.12.9-4" date="1741348800">- Use sysusers_create_compat macro to create user &amp; group
Resolves: RHEL-82605</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.12.9-4.1" date="1779278400">- Fix arbitrary code execution via crafted symlinks in sandbox-expose options
  Resolves: RHEL-165643
- Fix arbitrary file deletion on host via improper cache file path validation
  Resolves: RHEL-170171</changelog>
</package>
<package pkgid="fd36b911a649f06f8e816d8b22b7934f77cda29649e30d5c7861fdafa1047475" name="flatpak-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.12.9" rel="4.el9_8.1"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.12.9-2" date="1725278400">- Backport upstream patches for CVE-2024-42472
- Require bubblewrap version that has new --bind-fd option backported for
  addressing CVE-2024-42472</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.12.9-3" date="1725451200">- Fix previous changelog entry</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.12.9-4" date="1741348800">- Use sysusers_create_compat macro to create user &amp; group
Resolves: RHEL-82605</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.12.9-4.1" date="1779278400">- Fix arbitrary code execution via crafted symlinks in sandbox-expose options
  Resolves: RHEL-165643
- Fix arbitrary file deletion on host via improper cache file path validation
  Resolves: RHEL-170171</changelog>
</package>
<package pkgid="1dcbdb2b4b3f366be1b3c91ee7e57ecb6711f1a76ce0e959e8178ba6549f3bd9" name="flatpak-session-helper-debuginfo" arch="i686">
  <version epoch="0" ver="1.12.9" rel="4.el9_8.1"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.12.9-2" date="1725278400">- Backport upstream patches for CVE-2024-42472
- Require bubblewrap version that has new --bind-fd option backported for
  addressing CVE-2024-42472</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.12.9-3" date="1725451200">- Fix previous changelog entry</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.12.9-4" date="1741348800">- Use sysusers_create_compat macro to create user &amp; group
Resolves: RHEL-82605</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.12.9-4.1" date="1779278400">- Fix arbitrary code execution via crafted symlinks in sandbox-expose options
  Resolves: RHEL-165643
- Fix arbitrary file deletion on host via improper cache file path validation
  Resolves: RHEL-170171</changelog>
</package>
<package pkgid="3ea60a4ed3af4877f4f92f9168a1c529fd824dbaf085d7d7d3aa3ecfaa5cc9a9" name="flatpak-session-helper-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.12.9" rel="4.el9_8.1"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.12.9-2" date="1725278400">- Backport upstream patches for CVE-2024-42472
- Require bubblewrap version that has new --bind-fd option backported for
  addressing CVE-2024-42472</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.12.9-3" date="1725451200">- Fix previous changelog entry</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.12.9-4" date="1741348800">- Use sysusers_create_compat macro to create user &amp; group
Resolves: RHEL-82605</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.12.9-4.1" date="1779278400">- Fix arbitrary code execution via crafted symlinks in sandbox-expose options
  Resolves: RHEL-165643
- Fix arbitrary file deletion on host via improper cache file path validation
  Resolves: RHEL-170171</changelog>
</package>
<package pkgid="64774fe1a83cc43a2190bfa3b4e6a5970784d2427c9adb61c095bd70fb366fa4" name="freeipmi-bmc-watchdog-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6.18" rel="1.el9_8"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.17-1" date="1776427200">- Update to 1.6.17, fixes CVE-2026-33554</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.18-1" date="1781697600">- Update to 1.6.18, fixes CVE-2026-50031</changelog>
</package>
<package pkgid="644b8c0087881fccdb517d40071178e26e455f08f1e4c226ba781e0303794d8a" name="freeipmi-debuginfo" arch="i686">
  <version epoch="0" ver="1.6.18" rel="1.el9_8"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.17-1" date="1776427200">- Update to 1.6.17, fixes CVE-2026-33554</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.18-1" date="1781697600">- Update to 1.6.18, fixes CVE-2026-50031</changelog>
</package>
<package pkgid="9d5f516d1029517d5288e89e265680ef53526901ecc9ac5c0433e7d44d048156" name="freeipmi-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6.18" rel="1.el9_8"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.17-1" date="1776427200">- Update to 1.6.17, fixes CVE-2026-33554</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.18-1" date="1781697600">- Update to 1.6.18, fixes CVE-2026-50031</changelog>
</package>
<package pkgid="716240367919cd1049b0ac30a525384846652814e527eab53b122c6cea775722" name="freeipmi-debugsource" arch="i686">
  <version epoch="0" ver="1.6.18" rel="1.el9_8"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.17-1" date="1776427200">- Update to 1.6.17, fixes CVE-2026-33554</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.18-1" date="1781697600">- Update to 1.6.18, fixes CVE-2026-50031</changelog>
</package>
<package pkgid="de0859be57fcf4687531cd4dd521de46baa60ceeeb0549f14b4b16e2932e6a87" name="freeipmi-debugsource" arch="x86_64">
  <version epoch="0" ver="1.6.18" rel="1.el9_8"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.17-1" date="1776427200">- Update to 1.6.17, fixes CVE-2026-33554</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.18-1" date="1781697600">- Update to 1.6.18, fixes CVE-2026-50031</changelog>
</package>
<package pkgid="e98373e92458087d8dbb4e8ae64dd7c5bf4153b0a286e49e93b890e628d944ce" name="freeipmi-ipmidetectd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6.18" rel="1.el9_8"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.17-1" date="1776427200">- Update to 1.6.17, fixes CVE-2026-33554</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.18-1" date="1781697600">- Update to 1.6.18, fixes CVE-2026-50031</changelog>
</package>
<package pkgid="5af1e15c6a236cc450783cc2be76082c03e1916e61413b60e61b90ab9dbe765c" name="freeipmi-ipmiseld-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6.18" rel="1.el9_8"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.17-1" date="1776427200">- Update to 1.6.17, fixes CVE-2026-33554</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.18-1" date="1781697600">- Update to 1.6.18, fixes CVE-2026-50031</changelog>
</package>
<package pkgid="71a89fa90bf2f4265d5102068fe9798c9ebe391d85432e7454f356cbd840482b" name="freerdp-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="7.el9_8.3"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-1" date="1715256000">- Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
  CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
  CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-2" date="1768564800">- Try next DNS entry on connect failure
  Resolves: RHEL-113722</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-3" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363
  Resolves: RHEL-142348, RHEL-142332</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-4" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-148849, RHEL-148891, RHEL-149030</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-5" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151989, RHEL-152216</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-6" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081
  Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032
  Resolves: RHEL-149043, RHEL-149066, RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7" date="1774958400">- Fix use of nsc_process_message
  Resolves: RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.1" date="1776168000">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-163097, RHEL-163113</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.2" date="1777377600">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix growth of preallocated buffers (CVE-2026-27951)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
  Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482
  Resolves: RHEL-161519, RHEL-161085, RHEL-168463</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.3" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159860</changelog>
</package>
<package pkgid="f9900ca12ca5d6a9c211e813dad89fd897fb369294590f6fb5a684af0875cfbc" name="freerdp-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="7.el9_8.4"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-2" date="1768564800">- Try next DNS entry on connect failure
  Resolves: RHEL-113722</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-3" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363
  Resolves: RHEL-142348, RHEL-142332</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-4" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-148849, RHEL-148891, RHEL-149030</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-5" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151989, RHEL-152216</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-6" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081
  Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032
  Resolves: RHEL-149043, RHEL-149066, RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7" date="1774958400">- Fix use of nsc_process_message
  Resolves: RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.1" date="1776168000">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-163097, RHEL-163113</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.2" date="1777377600">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix growth of preallocated buffers (CVE-2026-27951)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
  Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482
  Resolves: RHEL-161519, RHEL-161085, RHEL-168463</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.3" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159860</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:2.11.7-7.4" date="1782302400">- Fix incorrect bounds checks in planar codec (CVE-2026-45700)
  Resolves: RHEL-186991</changelog>
</package>
<package pkgid="3cfcfbe253d30e3be3cb0ad6b4d29524fed57916c95351ff357ad1880b4525dc" name="freerdp-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="7.el9_8.5"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-3" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363
  Resolves: RHEL-142348, RHEL-142332</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-4" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-148849, RHEL-148891, RHEL-149030</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-5" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151989, RHEL-152216</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-6" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081
  Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032
  Resolves: RHEL-149043, RHEL-149066, RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7" date="1774958400">- Fix use of nsc_process_message
  Resolves: RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.1" date="1776168000">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-163097, RHEL-163113</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.2" date="1777377600">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix growth of preallocated buffers (CVE-2026-27951)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
  Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482
  Resolves: RHEL-161519, RHEL-161085, RHEL-168463</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.3" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159860</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:2.11.7-7.4" date="1782302400">- Fix incorrect bounds checks in planar codec (CVE-2026-45700)
  Resolves: RHEL-186991</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:2.11.7-7.5" date="1785931200">- Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299,
  CVE-2026-68580)
  Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605</changelog>
</package>
<package pkgid="c33ce600beca588fc5ec6d79bb00185b7cd02fa45ea1d5b56011eaaac80b05ee" name="freerdp-debugsource" arch="i686">
  <version epoch="2" ver="2.11.7" rel="7.el9_8.3"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-1" date="1715256000">- Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
  CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
  CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-2" date="1768564800">- Try next DNS entry on connect failure
  Resolves: RHEL-113722</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-3" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363
  Resolves: RHEL-142348, RHEL-142332</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-4" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-148849, RHEL-148891, RHEL-149030</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-5" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151989, RHEL-152216</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-6" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081
  Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032
  Resolves: RHEL-149043, RHEL-149066, RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7" date="1774958400">- Fix use of nsc_process_message
  Resolves: RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.1" date="1776168000">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-163097, RHEL-163113</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.2" date="1777377600">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix growth of preallocated buffers (CVE-2026-27951)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
  Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482
  Resolves: RHEL-161519, RHEL-161085, RHEL-168463</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.3" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159860</changelog>
</package>
<package pkgid="dd7804fc64c68e1cfe0f8d558de3b2c381e1cc1511f7f9efc80f075283cad09c" name="freerdp-debugsource" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="7.el9_8.3"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-1" date="1715256000">- Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
  CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
  CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-2" date="1768564800">- Try next DNS entry on connect failure
  Resolves: RHEL-113722</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-3" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363
  Resolves: RHEL-142348, RHEL-142332</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-4" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-148849, RHEL-148891, RHEL-149030</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-5" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151989, RHEL-152216</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-6" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081
  Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032
  Resolves: RHEL-149043, RHEL-149066, RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7" date="1774958400">- Fix use of nsc_process_message
  Resolves: RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.1" date="1776168000">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-163097, RHEL-163113</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.2" date="1777377600">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix growth of preallocated buffers (CVE-2026-27951)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
  Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482
  Resolves: RHEL-161519, RHEL-161085, RHEL-168463</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.3" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159860</changelog>
</package>
<package pkgid="55a6bf2419ccef37e35997df2a759de2076ed5b17d88bf807105810555fea1db" name="freerdp-debugsource" arch="i686">
  <version epoch="2" ver="2.11.7" rel="7.el9_8.4"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-2" date="1768564800">- Try next DNS entry on connect failure
  Resolves: RHEL-113722</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-3" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363
  Resolves: RHEL-142348, RHEL-142332</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-4" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-148849, RHEL-148891, RHEL-149030</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-5" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151989, RHEL-152216</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-6" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081
  Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032
  Resolves: RHEL-149043, RHEL-149066, RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7" date="1774958400">- Fix use of nsc_process_message
  Resolves: RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.1" date="1776168000">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-163097, RHEL-163113</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.2" date="1777377600">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix growth of preallocated buffers (CVE-2026-27951)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
  Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482
  Resolves: RHEL-161519, RHEL-161085, RHEL-168463</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.3" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159860</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:2.11.7-7.4" date="1782302400">- Fix incorrect bounds checks in planar codec (CVE-2026-45700)
  Resolves: RHEL-186991</changelog>
</package>
<package pkgid="559938f98186e57d0b1f6b100ad4267ab49ea50e74d77d38df4545f32166a804" name="freerdp-debugsource" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="7.el9_8.4"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-2" date="1768564800">- Try next DNS entry on connect failure
  Resolves: RHEL-113722</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-3" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363
  Resolves: RHEL-142348, RHEL-142332</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-4" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-148849, RHEL-148891, RHEL-149030</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-5" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151989, RHEL-152216</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-6" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081
  Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032
  Resolves: RHEL-149043, RHEL-149066, RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7" date="1774958400">- Fix use of nsc_process_message
  Resolves: RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.1" date="1776168000">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-163097, RHEL-163113</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.2" date="1777377600">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix growth of preallocated buffers (CVE-2026-27951)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
  Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482
  Resolves: RHEL-161519, RHEL-161085, RHEL-168463</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.3" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159860</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:2.11.7-7.4" date="1782302400">- Fix incorrect bounds checks in planar codec (CVE-2026-45700)
  Resolves: RHEL-186991</changelog>
</package>
<package pkgid="8a5766b778885087803cc26c2a90cc0ca083b7fa8f1d986fe25b8679611aef76" name="freerdp-debugsource" arch="i686">
  <version epoch="2" ver="2.11.7" rel="7.el9_8.5"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-3" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363
  Resolves: RHEL-142348, RHEL-142332</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-4" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-148849, RHEL-148891, RHEL-149030</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-5" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151989, RHEL-152216</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-6" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081
  Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032
  Resolves: RHEL-149043, RHEL-149066, RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7" date="1774958400">- Fix use of nsc_process_message
  Resolves: RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.1" date="1776168000">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-163097, RHEL-163113</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.2" date="1777377600">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix growth of preallocated buffers (CVE-2026-27951)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
  Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482
  Resolves: RHEL-161519, RHEL-161085, RHEL-168463</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.3" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159860</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:2.11.7-7.4" date="1782302400">- Fix incorrect bounds checks in planar codec (CVE-2026-45700)
  Resolves: RHEL-186991</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:2.11.7-7.5" date="1785931200">- Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299,
  CVE-2026-68580)
  Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605</changelog>
</package>
<package pkgid="4f66a5349d0ef2000602b7394f0496d75c34e5344cf6d16c6f51c50f34ba0293" name="freerdp-debugsource" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="7.el9_8.5"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-3" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363
  Resolves: RHEL-142348, RHEL-142332</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-4" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-148849, RHEL-148891, RHEL-149030</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-5" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151989, RHEL-152216</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-6" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081
  Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032
  Resolves: RHEL-149043, RHEL-149066, RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7" date="1774958400">- Fix use of nsc_process_message
  Resolves: RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.1" date="1776168000">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-163097, RHEL-163113</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.2" date="1777377600">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix growth of preallocated buffers (CVE-2026-27951)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
  Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482
  Resolves: RHEL-161519, RHEL-161085, RHEL-168463</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.3" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159860</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:2.11.7-7.4" date="1782302400">- Fix incorrect bounds checks in planar codec (CVE-2026-45700)
  Resolves: RHEL-186991</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:2.11.7-7.5" date="1785931200">- Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299,
  CVE-2026-68580)
  Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605</changelog>
</package>
<package pkgid="2ede5d7070c4e6160f31daf29b3f23a2abe35651077e3c5f8e63f2fbff5fdf4b" name="freerdp-libs-debuginfo" arch="i686">
  <version epoch="2" ver="2.11.7" rel="7.el9_8.3"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-1" date="1715256000">- Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
  CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
  CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-2" date="1768564800">- Try next DNS entry on connect failure
  Resolves: RHEL-113722</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-3" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363
  Resolves: RHEL-142348, RHEL-142332</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-4" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-148849, RHEL-148891, RHEL-149030</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-5" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151989, RHEL-152216</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-6" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081
  Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032
  Resolves: RHEL-149043, RHEL-149066, RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7" date="1774958400">- Fix use of nsc_process_message
  Resolves: RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.1" date="1776168000">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-163097, RHEL-163113</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.2" date="1777377600">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix growth of preallocated buffers (CVE-2026-27951)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
  Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482
  Resolves: RHEL-161519, RHEL-161085, RHEL-168463</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.3" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159860</changelog>
</package>
<package pkgid="890fe6a3ff1faf3fb75f2313a7633f2ccb3c43f67ad2fd018152a85c4f5c550c" name="freerdp-libs-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="7.el9_8.3"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-1" date="1715256000">- Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
  CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
  CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-2" date="1768564800">- Try next DNS entry on connect failure
  Resolves: RHEL-113722</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-3" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363
  Resolves: RHEL-142348, RHEL-142332</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-4" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-148849, RHEL-148891, RHEL-149030</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-5" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151989, RHEL-152216</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-6" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081
  Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032
  Resolves: RHEL-149043, RHEL-149066, RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7" date="1774958400">- Fix use of nsc_process_message
  Resolves: RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.1" date="1776168000">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-163097, RHEL-163113</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.2" date="1777377600">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix growth of preallocated buffers (CVE-2026-27951)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
  Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482
  Resolves: RHEL-161519, RHEL-161085, RHEL-168463</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.3" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159860</changelog>
</package>
<package pkgid="9672b2c0295e4cd0944c8fd8b4ebddab7a05b8ca46644d66e0439cfbffbe9de5" name="freerdp-libs-debuginfo" arch="i686">
  <version epoch="2" ver="2.11.7" rel="7.el9_8.4"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-2" date="1768564800">- Try next DNS entry on connect failure
  Resolves: RHEL-113722</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-3" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363
  Resolves: RHEL-142348, RHEL-142332</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-4" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-148849, RHEL-148891, RHEL-149030</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-5" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151989, RHEL-152216</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-6" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081
  Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032
  Resolves: RHEL-149043, RHEL-149066, RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7" date="1774958400">- Fix use of nsc_process_message
  Resolves: RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.1" date="1776168000">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-163097, RHEL-163113</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.2" date="1777377600">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix growth of preallocated buffers (CVE-2026-27951)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
  Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482
  Resolves: RHEL-161519, RHEL-161085, RHEL-168463</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.3" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159860</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:2.11.7-7.4" date="1782302400">- Fix incorrect bounds checks in planar codec (CVE-2026-45700)
  Resolves: RHEL-186991</changelog>
</package>
<package pkgid="0ce24ec2e0ce92a19511d1a788dec3d03a59fc271873131e8a1af52663eaf7d8" name="freerdp-libs-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="7.el9_8.4"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-2" date="1768564800">- Try next DNS entry on connect failure
  Resolves: RHEL-113722</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-3" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363
  Resolves: RHEL-142348, RHEL-142332</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-4" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-148849, RHEL-148891, RHEL-149030</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-5" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151989, RHEL-152216</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-6" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081
  Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032
  Resolves: RHEL-149043, RHEL-149066, RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7" date="1774958400">- Fix use of nsc_process_message
  Resolves: RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.1" date="1776168000">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-163097, RHEL-163113</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.2" date="1777377600">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix growth of preallocated buffers (CVE-2026-27951)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
  Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482
  Resolves: RHEL-161519, RHEL-161085, RHEL-168463</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.3" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159860</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:2.11.7-7.4" date="1782302400">- Fix incorrect bounds checks in planar codec (CVE-2026-45700)
  Resolves: RHEL-186991</changelog>
</package>
<package pkgid="b2260752efa3ad535a3352b27e29886dce7e8ee84f61094b42220984a600e27c" name="freerdp-libs-debuginfo" arch="i686">
  <version epoch="2" ver="2.11.7" rel="7.el9_8.5"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-3" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363
  Resolves: RHEL-142348, RHEL-142332</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-4" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-148849, RHEL-148891, RHEL-149030</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-5" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151989, RHEL-152216</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-6" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081
  Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032
  Resolves: RHEL-149043, RHEL-149066, RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7" date="1774958400">- Fix use of nsc_process_message
  Resolves: RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.1" date="1776168000">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-163097, RHEL-163113</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.2" date="1777377600">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix growth of preallocated buffers (CVE-2026-27951)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
  Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482
  Resolves: RHEL-161519, RHEL-161085, RHEL-168463</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.3" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159860</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:2.11.7-7.4" date="1782302400">- Fix incorrect bounds checks in planar codec (CVE-2026-45700)
  Resolves: RHEL-186991</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:2.11.7-7.5" date="1785931200">- Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299,
  CVE-2026-68580)
  Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605</changelog>
</package>
<package pkgid="7bebcf04601068256e1ab31b03bbac5205ad6bd8815bf29602f02a5ce6d2e462" name="freerdp-libs-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="7.el9_8.5"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-3" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363
  Resolves: RHEL-142348, RHEL-142332</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-4" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-148849, RHEL-148891, RHEL-149030</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-5" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151989, RHEL-152216</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-6" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081
  Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032
  Resolves: RHEL-149043, RHEL-149066, RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7" date="1774958400">- Fix use of nsc_process_message
  Resolves: RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.1" date="1776168000">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-163097, RHEL-163113</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.2" date="1777377600">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix growth of preallocated buffers (CVE-2026-27951)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
  Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482
  Resolves: RHEL-161519, RHEL-161085, RHEL-168463</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.3" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159860</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:2.11.7-7.4" date="1782302400">- Fix incorrect bounds checks in planar codec (CVE-2026-45700)
  Resolves: RHEL-186991</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:2.11.7-7.5" date="1785931200">- Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299,
  CVE-2026-68580)
  Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605</changelog>
</package>
<package pkgid="31045b1edf29378ca7a681a046b9e731fa31b469be692c373eb41d1798583845" name="frr-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.5.3" rel="13.el9_8"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-5" date="1739275200">- Resolves: RHEL-78318 - BFD status down in FRR does not bring down BGP session between peers</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-6" date="1739534400">- Resolves: RHEL-78354 - BGP with BFD has a dropped Connection before peering established</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-7" date="1739534401">- Resolves: RHEL-68432 - FRR gives false warning when Graceful Restart enabled</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-8" date="1743681600">- Resolves: RHEL-85950 - FRR doesn't send logs to stdout when running as a daemon</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-9" date="1747396800">- Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions
- Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-10" date="1758283200">- Resolves: RHEL-13756 - Source address set in FRR route-map not working with IPv6</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-11" date="1761739200">- Resolves: RHEL-64427 - FRR ignores kernel routes from the system</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-12" date="1768564800">- Resolves: RHEL-137180 - Files under /var are not properly created in image-mode</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-13" date="1779364800">- Resolves: RHEL-174677 - denial of service via crafted FlowSpec component</changelog>
</package>
<package pkgid="14d25231e63028a46cf783621e73db24ab57a0b3f7b0144f61070c2c7fb73c0c" name="frr-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.5.3" rel="15.el9_8.1"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-7" date="1739534400">- Resolves: RHEL-68432 - FRR gives false warning when Graceful Restart enabled</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-8" date="1743681600">- Resolves: RHEL-85950 - FRR doesn't send logs to stdout when running as a daemon</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-9" date="1747396800">- Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions
- Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-10" date="1758283200">- Resolves: RHEL-13756 - Source address set in FRR route-map not working with IPv6</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-11" date="1761739200">- Resolves: RHEL-64427 - FRR ignores kernel routes from the system</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-12" date="1768564800">- Resolves: RHEL-137180 - Files under /var are not properly created in image-mode</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-13" date="1779364800">- Resolves: RHEL-174677 - denial of service via crafted FlowSpec component</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-14" date="1781265600">- Resolves: RHEL-152300 - ignored route in the kernel after flapping interface</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-15" date="1783080000">- Resolves: RHEL-176258 - AVC when reading user's site-packages</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 8.5.3-15.1" date="1783684800">- Resolves: RHEL-193234 - input validation fixes for EVPN NLRI and ENCAP/VNC packet parsing</changelog>
</package>
<package pkgid="c9febbad227b8167a1198c6a9863fb4339af0dad17b8d4a3ca7ea43d9941229c" name="frr-debugsource" arch="x86_64">
  <version epoch="0" ver="8.5.3" rel="13.el9_8"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-5" date="1739275200">- Resolves: RHEL-78318 - BFD status down in FRR does not bring down BGP session between peers</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-6" date="1739534400">- Resolves: RHEL-78354 - BGP with BFD has a dropped Connection before peering established</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-7" date="1739534401">- Resolves: RHEL-68432 - FRR gives false warning when Graceful Restart enabled</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-8" date="1743681600">- Resolves: RHEL-85950 - FRR doesn't send logs to stdout when running as a daemon</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-9" date="1747396800">- Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions
- Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-10" date="1758283200">- Resolves: RHEL-13756 - Source address set in FRR route-map not working with IPv6</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-11" date="1761739200">- Resolves: RHEL-64427 - FRR ignores kernel routes from the system</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-12" date="1768564800">- Resolves: RHEL-137180 - Files under /var are not properly created in image-mode</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-13" date="1779364800">- Resolves: RHEL-174677 - denial of service via crafted FlowSpec component</changelog>
</package>
<package pkgid="da3caf78a53881cfe2c9b6dcae5b1af6eba6cdb100ea7e9b78bbaf0313b83dcc" name="frr-debugsource" arch="x86_64">
  <version epoch="0" ver="8.5.3" rel="15.el9_8.1"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-7" date="1739534400">- Resolves: RHEL-68432 - FRR gives false warning when Graceful Restart enabled</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-8" date="1743681600">- Resolves: RHEL-85950 - FRR doesn't send logs to stdout when running as a daemon</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-9" date="1747396800">- Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions
- Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-10" date="1758283200">- Resolves: RHEL-13756 - Source address set in FRR route-map not working with IPv6</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-11" date="1761739200">- Resolves: RHEL-64427 - FRR ignores kernel routes from the system</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-12" date="1768564800">- Resolves: RHEL-137180 - Files under /var are not properly created in image-mode</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-13" date="1779364800">- Resolves: RHEL-174677 - denial of service via crafted FlowSpec component</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-14" date="1781265600">- Resolves: RHEL-152300 - ignored route in the kernel after flapping interface</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 8.5.3-15" date="1783080000">- Resolves: RHEL-176258 - AVC when reading user's site-packages</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 8.5.3-15.1" date="1783684800">- Resolves: RHEL-193234 - input validation fixes for EVPN NLRI and ENCAP/VNC packet parsing</changelog>
</package>
<package pkgid="15b06da7f623de7d02474ea9b3b0a65269366a7d7765e6cb5199f2b7e64e08ca" name="galera-debuginfo" arch="x86_64">
  <version epoch="0" ver="26.4.20" rel="1.module+el9.7.0+159+ab5ab22d"/>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.13-1" date="1668513600">- Rebase to 26.4.13</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.14-1" date="1682769600">- Rebase to 26.4.14</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.16-1" date="1700222400">- Rebase to 26.4.16</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.18-1" date="1717761600">- Rebase to 26.4.18</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.19-1" date="1729252800">- Rebase to 26.4.19</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.20-1" date="1731585600">- Rebase to 26.4.20</changelog>
</package>
<package pkgid="c2853e554a46f8e8c9f843f69adb45c6b98035dee176235c223635ea16816442" name="galera-debuginfo" arch="x86_64">
  <version epoch="0" ver="26.4.23" rel="1.module+el9.8.0+164+649cdb65"/>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.16-1" date="1700222400">- Rebase to 26.4.16</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.18-1" date="1717761600">- Rebase to 26.4.18</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.19-1" date="1729252800">- Rebase to 26.4.19</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.21-1" date="1738756800">- Rebase to 26.4.21</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 26.4.21-2" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups automatically</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.22-1" date="1753876800">- Rebase to 26.4.22</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.23-1" date="1754654400">- Rebase to 26.4.23</changelog>
</package>
<package pkgid="9899318770f33d9677aed8964a54778bc55b3b09b40af8f07447e784e2af75f5" name="galera-debugsource" arch="x86_64">
  <version epoch="0" ver="26.4.20" rel="1.module+el9.7.0+159+ab5ab22d"/>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.13-1" date="1668513600">- Rebase to 26.4.13</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.14-1" date="1682769600">- Rebase to 26.4.14</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.16-1" date="1700222400">- Rebase to 26.4.16</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.18-1" date="1717761600">- Rebase to 26.4.18</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.19-1" date="1729252800">- Rebase to 26.4.19</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.20-1" date="1731585600">- Rebase to 26.4.20</changelog>
</package>
<package pkgid="b813cdde43152decc7946a480b068da2511a83d2b4d0b2fc4946f12fba6f254c" name="galera-debugsource" arch="x86_64">
  <version epoch="0" ver="26.4.23" rel="1.module+el9.8.0+164+649cdb65"/>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.16-1" date="1700222400">- Rebase to 26.4.16</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.18-1" date="1717761600">- Rebase to 26.4.18</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.19-1" date="1729252800">- Rebase to 26.4.19</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.21-1" date="1738756800">- Rebase to 26.4.21</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 26.4.21-2" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups automatically</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.22-1" date="1753876800">- Rebase to 26.4.22</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.23-1" date="1754654400">- Rebase to 26.4.23</changelog>
</package>
<package pkgid="72a250e05b5a8f4df75e59d3e99054520426af088a6ed3feb873fef4184cabd9" name="gdm-debuginfo" arch="i686">
  <version epoch="1" ver="40.1" rel="44.el9_8"/>
  <changelog author="Joan Torres &lt;joantolo@redhat.com&gt; - 40.1-36" date="1753963200">- Remove adding -nocursor option. Using a cursor-theme already allows this.
  Related: RHEL-81194</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-37" date="1755777600">- Fix precedence order when loading sessions
  Resolves: RHEL-4133</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-38" date="1759406400">- Fix issue on conflicting sessions when they are remote
  Resolves: RHEL-123357</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-39" date="1761912000">- Fix Handle GDM_SUPPORTED_SESSION_TYPES being unset
  Resolves: RHEL-117034</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-40" date="1763467200">- Now Plymouth will quit even when no monitor is connected.
  Resolves: RHEL-129215</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-41" date="1763467201">- Fix recording wtmp/utmp/btmp
  Resolves: RHEL-129305</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-42" date="1772798400">- Terminate conflicting sesions started outside of GDM 
  Resolves: RHEL-4108</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-43" date="1779710400">- Update how GDM handles Registering session/display
  to properly terminate plymouth
  Resolves: https://redhat.atlassian.net/browse/RHEL-178706</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 40.1-43.1" date="1780056000">- retrigger new build in correct target
  Resolves: https://redhat.atlassian.net/browse/RHEL-178706</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-44" date="1780315200">- Create display in "legacy-xorg" mode checking displays in tty
  Resolves: https://redhat.atlassian.net/browse/RHEL-180820</changelog>
</package>
<package pkgid="37068f82adfae554471122b963cae00ae470032a0db1994c6cb4f412e34ce900" name="gdm-debuginfo" arch="x86_64">
  <version epoch="1" ver="40.1" rel="44.el9_8"/>
  <changelog author="Joan Torres &lt;joantolo@redhat.com&gt; - 40.1-36" date="1753963200">- Remove adding -nocursor option. Using a cursor-theme already allows this.
  Related: RHEL-81194</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-37" date="1755777600">- Fix precedence order when loading sessions
  Resolves: RHEL-4133</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-38" date="1759406400">- Fix issue on conflicting sessions when they are remote
  Resolves: RHEL-123357</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-39" date="1761912000">- Fix Handle GDM_SUPPORTED_SESSION_TYPES being unset
  Resolves: RHEL-117034</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-40" date="1763467200">- Now Plymouth will quit even when no monitor is connected.
  Resolves: RHEL-129215</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-41" date="1763467201">- Fix recording wtmp/utmp/btmp
  Resolves: RHEL-129305</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-42" date="1772798400">- Terminate conflicting sesions started outside of GDM 
  Resolves: RHEL-4108</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-43" date="1779710400">- Update how GDM handles Registering session/display
  to properly terminate plymouth
  Resolves: https://redhat.atlassian.net/browse/RHEL-178706</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 40.1-43.1" date="1780056000">- retrigger new build in correct target
  Resolves: https://redhat.atlassian.net/browse/RHEL-178706</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-44" date="1780315200">- Create display in "legacy-xorg" mode checking displays in tty
  Resolves: https://redhat.atlassian.net/browse/RHEL-180820</changelog>
</package>
<package pkgid="cd2e5a4e9e33f77669800272cc5f1f64b19a613e1f60421a6caf62c901699e58" name="gdm-debugsource" arch="i686">
  <version epoch="1" ver="40.1" rel="44.el9_8"/>
  <changelog author="Joan Torres &lt;joantolo@redhat.com&gt; - 40.1-36" date="1753963200">- Remove adding -nocursor option. Using a cursor-theme already allows this.
  Related: RHEL-81194</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-37" date="1755777600">- Fix precedence order when loading sessions
  Resolves: RHEL-4133</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-38" date="1759406400">- Fix issue on conflicting sessions when they are remote
  Resolves: RHEL-123357</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-39" date="1761912000">- Fix Handle GDM_SUPPORTED_SESSION_TYPES being unset
  Resolves: RHEL-117034</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-40" date="1763467200">- Now Plymouth will quit even when no monitor is connected.
  Resolves: RHEL-129215</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-41" date="1763467201">- Fix recording wtmp/utmp/btmp
  Resolves: RHEL-129305</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-42" date="1772798400">- Terminate conflicting sesions started outside of GDM 
  Resolves: RHEL-4108</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-43" date="1779710400">- Update how GDM handles Registering session/display
  to properly terminate plymouth
  Resolves: https://redhat.atlassian.net/browse/RHEL-178706</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 40.1-43.1" date="1780056000">- retrigger new build in correct target
  Resolves: https://redhat.atlassian.net/browse/RHEL-178706</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-44" date="1780315200">- Create display in "legacy-xorg" mode checking displays in tty
  Resolves: https://redhat.atlassian.net/browse/RHEL-180820</changelog>
</package>
<package pkgid="9d8f5c27834a533cca85d3420aacbf64bd9a0645df242b5c52302ee9f5d15660" name="gdm-debugsource" arch="x86_64">
  <version epoch="1" ver="40.1" rel="44.el9_8"/>
  <changelog author="Joan Torres &lt;joantolo@redhat.com&gt; - 40.1-36" date="1753963200">- Remove adding -nocursor option. Using a cursor-theme already allows this.
  Related: RHEL-81194</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-37" date="1755777600">- Fix precedence order when loading sessions
  Resolves: RHEL-4133</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-38" date="1759406400">- Fix issue on conflicting sessions when they are remote
  Resolves: RHEL-123357</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-39" date="1761912000">- Fix Handle GDM_SUPPORTED_SESSION_TYPES being unset
  Resolves: RHEL-117034</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-40" date="1763467200">- Now Plymouth will quit even when no monitor is connected.
  Resolves: RHEL-129215</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-41" date="1763467201">- Fix recording wtmp/utmp/btmp
  Resolves: RHEL-129305</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-42" date="1772798400">- Terminate conflicting sesions started outside of GDM 
  Resolves: RHEL-4108</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-43" date="1779710400">- Update how GDM handles Registering session/display
  to properly terminate plymouth
  Resolves: https://redhat.atlassian.net/browse/RHEL-178706</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 40.1-43.1" date="1780056000">- retrigger new build in correct target
  Resolves: https://redhat.atlassian.net/browse/RHEL-178706</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.1-44" date="1780315200">- Create display in "legacy-xorg" mode checking displays in tty
  Resolves: https://redhat.atlassian.net/browse/RHEL-180820</changelog>
</package>
<package pkgid="979a3d8d961bec78b99fa1a77ff621f84d30e8b2f792a625136d9609e17e32cb" name="gegl04-debuginfo" arch="i686">
  <version epoch="0" ver="0.4.62" rel="1.el9_8.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.4.58-1" date="1745496000">- New upstream release 0.4.58 (RHEL-88143)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.4.62-1" date="1747742400">- New upstream release 0.4.62 (RHEL-88143)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.4.62-1.1" date="1782388800">- Fix CVE-2026-2050: buffer overflow in rgbe_read_new_rle
- Resolves: RHEL-188264</changelog>
</package>
<package pkgid="8ea34c0d1ffb1ad8e624e2fef86e129eace115daa465b34341bb6f8e492fa378" name="gegl04-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.62" rel="1.el9_8.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.4.58-1" date="1745496000">- New upstream release 0.4.58 (RHEL-88143)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.4.62-1" date="1747742400">- New upstream release 0.4.62 (RHEL-88143)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.4.62-1.1" date="1782388800">- Fix CVE-2026-2050: buffer overflow in rgbe_read_new_rle
- Resolves: RHEL-188264</changelog>
</package>
<package pkgid="c7e7edf6b887d69b1b5873ae4db28d6b93da58389eef099d6b0e5593df74e7fa" name="gegl04-debugsource" arch="i686">
  <version epoch="0" ver="0.4.62" rel="1.el9_8.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.4.58-1" date="1745496000">- New upstream release 0.4.58 (RHEL-88143)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.4.62-1" date="1747742400">- New upstream release 0.4.62 (RHEL-88143)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.4.62-1.1" date="1782388800">- Fix CVE-2026-2050: buffer overflow in rgbe_read_new_rle
- Resolves: RHEL-188264</changelog>
</package>
<package pkgid="eacabd752360f71661e978fd8df154770b5128da7e64a2aea6fba2ceb98668a2" name="gegl04-debugsource" arch="x86_64">
  <version epoch="0" ver="0.4.62" rel="1.el9_8.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.4.58-1" date="1745496000">- New upstream release 0.4.58 (RHEL-88143)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.4.62-1" date="1747742400">- New upstream release 0.4.62 (RHEL-88143)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.4.62-1.1" date="1782388800">- Fix CVE-2026-2050: buffer overflow in rgbe_read_new_rle
- Resolves: RHEL-188264</changelog>
</package>
<package pkgid="0581ba1467eacc8cbefb13239e8c9c44da4014b1e2f5697d07fe2fa50ab411b4" name="gegl04-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.62" rel="1.el9_8.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.4.58-1" date="1745496000">- New upstream release 0.4.58 (RHEL-88143)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.4.62-1" date="1747742400">- New upstream release 0.4.62 (RHEL-88143)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.4.62-1.1" date="1782388800">- Fix CVE-2026-2050: buffer overflow in rgbe_read_new_rle
- Resolves: RHEL-188264</changelog>
</package>
<package pkgid="f9958fc5c877334113856c20409d10a9492dae875a56627091f83bdda7b42b1d" name="giflib-debuginfo" arch="i686">
  <version epoch="0" ver="5.2.1" rel="10.el9_8.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-10" date="1774353600">- fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154864)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-10.1" date="1778500800">- rebuild</changelog>
</package>
<package pkgid="5cb0827053a872c5a99ba9909a3c20aebb812f16a35541844e43ce375db78d97" name="giflib-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="10.el9_8.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-10" date="1774353600">- fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154864)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-10.1" date="1778500800">- rebuild</changelog>
</package>
<package pkgid="70bf732a987a76249f0a22ea3fbaca359833b4aec6a91f16ddc6a9519daa6131" name="giflib-debuginfo" arch="i686">
  <version epoch="0" ver="5.2.1" rel="10.el9_8.2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-10" date="1774353600">- fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154864)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-10.1" date="1778500800">- rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-10.2" date="1780920000">- fix CVE-2026-26740: buffer overflow in EGifGCBToExtension (RHEL-157133)</changelog>
</package>
<package pkgid="ac5ea7fee4ce5e16b56775a0fc49dbbfdd4c95de06900f23d89345b5e7845ed2" name="giflib-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="10.el9_8.2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-10" date="1774353600">- fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154864)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-10.1" date="1778500800">- rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-10.2" date="1780920000">- fix CVE-2026-26740: buffer overflow in EGifGCBToExtension (RHEL-157133)</changelog>
</package>
<package pkgid="5f1b78e2437ee903e2ec4c37859982a1897544d2979253a6ee9b47d42da04c56" name="giflib-debugsource" arch="i686">
  <version epoch="0" ver="5.2.1" rel="10.el9_8.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-10" date="1774353600">- fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154864)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-10.1" date="1778500800">- rebuild</changelog>
</package>
<package pkgid="28c94ac7288b198781a429bb552a354198edd1b65f7c5e1ae71fab53f1acfb38" name="giflib-debugsource" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="10.el9_8.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-10" date="1774353600">- fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154864)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-10.1" date="1778500800">- rebuild</changelog>
</package>
<package pkgid="4e453e3bbada9317521e6f266090b58e81da42cd465d61aa1a159dce58b3fb88" name="giflib-debugsource" arch="i686">
  <version epoch="0" ver="5.2.1" rel="10.el9_8.2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-10" date="1774353600">- fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154864)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-10.1" date="1778500800">- rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-10.2" date="1780920000">- fix CVE-2026-26740: buffer overflow in EGifGCBToExtension (RHEL-157133)</changelog>
</package>
<package pkgid="6e187d0c917b7577e2298503b46138288a134fba818df6ca0d5bccf07b0046c1" name="giflib-debugsource" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="10.el9_8.2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-10" date="1774353600">- fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154864)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-10.1" date="1778500800">- rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-10.2" date="1780920000">- fix CVE-2026-26740: buffer overflow in EGifGCBToExtension (RHEL-157133)</changelog>
</package>
<package pkgid="190717c252878122e154574a0a2515e8b96a49b970e8a5e66df6a1d6507b5a5a" name="git-lfs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.7.1" rel="4.el9_8.1"/>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.4.1-3" date="1723032000">- Make Git-LFS FIPS compliant
- Resolves: RHEL-53086</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.0-1" date="1732795200">- Update to 3.6.0
- Resolves: RHEL-63968, RHEL-61045, RHEL-47219, RHEL-43318, RHEL-35936, RHEL-2791</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.1-1" date="1736942400">- Update to 3.6.1
- Resolves: RHEL-73940</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.1-2" date="1748952000">- Rebuild with new Golang
- Resolves: RHEL-89304</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.1-3" date="1754913600">- Add patch to fix build failures with Go 1.24&lt;
- Resolves: RHEL-106475</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-1" date="1767614400">- Update to 3.7.1
- Resolves: RHEL-118154, RHEL-122429</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-2" date="1769083200">- Rebuild with new Golang
- Resolves: RHEL-140548</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-3" date="1771243200">- Rebuild with new Golang
- Resolves: RHEL-146102, RHEL-149638</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-4" date="1775649600">- Rebuild with new Golang
- Resolves: RHEL-158765, RHEL-166675, RHEL-167677, RHEL-170838</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.7.1-4.1" date="1781179200">- Fix CVE-2026-39821: vendored golang.org/x/net/idna ToUnicode
  incorrectly accepting all-ASCII xn-- labels
- Resolves: RHEL-183797</changelog>
</package>
<package pkgid="503248e13428d43430a40f97e91d3c361ab3e7b24ebfc9417341ce084a1b7317" name="git-lfs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.7.1" rel="4.el9_8.2"/>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.0-1" date="1732795200">- Update to 3.6.0
- Resolves: RHEL-63968, RHEL-61045, RHEL-47219, RHEL-43318, RHEL-35936, RHEL-2791</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.1-1" date="1736942400">- Update to 3.6.1
- Resolves: RHEL-73940</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.1-2" date="1748952000">- Rebuild with new Golang
- Resolves: RHEL-89304</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.1-3" date="1754913600">- Add patch to fix build failures with Go 1.24&lt;
- Resolves: RHEL-106475</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-1" date="1767614400">- Update to 3.7.1
- Resolves: RHEL-118154, RHEL-122429</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-2" date="1769083200">- Rebuild with new Golang
- Resolves: RHEL-140548</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-3" date="1771243200">- Rebuild with new Golang
- Resolves: RHEL-146102, RHEL-149638</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-4" date="1775649600">- Rebuild with new Golang
- Resolves: RHEL-158765, RHEL-166675, RHEL-167677, RHEL-170838</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.7.1-4.1" date="1781179200">- Fix CVE-2026-39821: vendored golang.org/x/net/idna ToUnicode
  incorrectly accepting all-ASCII xn-- labels
- Resolves: RHEL-183797</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.7.1-4.2" date="1783512000">- Rebuild with new Golang
- Resolves: RHEL-187329</changelog>
</package>
<package pkgid="a34c542697cc58448b524b92fa972bdd2f1cb24ded786811244b891e29234e08" name="git-lfs-debugsource" arch="x86_64">
  <version epoch="0" ver="3.7.1" rel="4.el9_8.1"/>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.4.1-3" date="1723032000">- Make Git-LFS FIPS compliant
- Resolves: RHEL-53086</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.0-1" date="1732795200">- Update to 3.6.0
- Resolves: RHEL-63968, RHEL-61045, RHEL-47219, RHEL-43318, RHEL-35936, RHEL-2791</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.1-1" date="1736942400">- Update to 3.6.1
- Resolves: RHEL-73940</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.1-2" date="1748952000">- Rebuild with new Golang
- Resolves: RHEL-89304</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.1-3" date="1754913600">- Add patch to fix build failures with Go 1.24&lt;
- Resolves: RHEL-106475</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-1" date="1767614400">- Update to 3.7.1
- Resolves: RHEL-118154, RHEL-122429</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-2" date="1769083200">- Rebuild with new Golang
- Resolves: RHEL-140548</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-3" date="1771243200">- Rebuild with new Golang
- Resolves: RHEL-146102, RHEL-149638</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-4" date="1775649600">- Rebuild with new Golang
- Resolves: RHEL-158765, RHEL-166675, RHEL-167677, RHEL-170838</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.7.1-4.1" date="1781179200">- Fix CVE-2026-39821: vendored golang.org/x/net/idna ToUnicode
  incorrectly accepting all-ASCII xn-- labels
- Resolves: RHEL-183797</changelog>
</package>
<package pkgid="439818aef1dc4288a19b73a3342208831be0a8f9ddcbfb096f9a16af6f3e540d" name="git-lfs-debugsource" arch="x86_64">
  <version epoch="0" ver="3.7.1" rel="4.el9_8.2"/>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.0-1" date="1732795200">- Update to 3.6.0
- Resolves: RHEL-63968, RHEL-61045, RHEL-47219, RHEL-43318, RHEL-35936, RHEL-2791</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.1-1" date="1736942400">- Update to 3.6.1
- Resolves: RHEL-73940</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.1-2" date="1748952000">- Rebuild with new Golang
- Resolves: RHEL-89304</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.1-3" date="1754913600">- Add patch to fix build failures with Go 1.24&lt;
- Resolves: RHEL-106475</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-1" date="1767614400">- Update to 3.7.1
- Resolves: RHEL-118154, RHEL-122429</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-2" date="1769083200">- Rebuild with new Golang
- Resolves: RHEL-140548</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-3" date="1771243200">- Rebuild with new Golang
- Resolves: RHEL-146102, RHEL-149638</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-4" date="1775649600">- Rebuild with new Golang
- Resolves: RHEL-158765, RHEL-166675, RHEL-167677, RHEL-170838</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.7.1-4.1" date="1781179200">- Fix CVE-2026-39821: vendored golang.org/x/net/idna ToUnicode
  incorrectly accepting all-ASCII xn-- labels
- Resolves: RHEL-183797</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.7.1-4.2" date="1783512000">- Rebuild with new Golang
- Resolves: RHEL-187329</changelog>
</package>
<package pkgid="e461d72f00387294f678146fe1aa990ccbb7c8007eef46c662278b63547b43ef" name="glib2-debuginfo" arch="i686">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.1"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-15" date="1715601600">- Fix CVE-2024-34397, signal subscription vulnerabilities
- Resolves: RHEL-35775</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.68.4-16" date="1727352000">- Add support for x-gvfs-trash mount option
- Resolves: RHEL-52360</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-17" date="1752235200">- Add patches for CVE-2024-52533 and CVE-2025-4373
- Update GDateTime test for new tzdata
- Resolves: RHEL-94483
- Resolves: RHEL-102844</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.68.4-18" date="1758110400">- gdbusconnection: Prevent sending a serial of zero on overflow
- Resolves: RHEL-114059</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
</package>
<package pkgid="615a3ee4f19a9cd0b6e0ead19118c669dd297bab7c8f83a27d5fbbd248edb489" name="glib2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.1"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-15" date="1715601600">- Fix CVE-2024-34397, signal subscription vulnerabilities
- Resolves: RHEL-35775</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.68.4-16" date="1727352000">- Add support for x-gvfs-trash mount option
- Resolves: RHEL-52360</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-17" date="1752235200">- Add patches for CVE-2024-52533 and CVE-2025-4373
- Update GDateTime test for new tzdata
- Resolves: RHEL-94483
- Resolves: RHEL-102844</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.68.4-18" date="1758110400">- gdbusconnection: Prevent sending a serial of zero on overflow
- Resolves: RHEL-114059</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
</package>
<package pkgid="4f13251681a72aca342c6d8b6c949d45a0e3d7058fbcdd04bbbe48fb12873e2c" name="glib2-debuginfo" arch="i686">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.2"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.68.4-16" date="1727352000">- Add support for x-gvfs-trash mount option
- Resolves: RHEL-52360</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-17" date="1752235200">- Add patches for CVE-2024-52533 and CVE-2025-4373
- Update GDateTime test for new tzdata
- Resolves: RHEL-94483
- Resolves: RHEL-102844</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.68.4-18" date="1758110400">- gdbusconnection: Prevent sending a serial of zero on overflow
- Resolves: RHEL-114059</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.2" date="1783598400">- Fix CVE-2026-58016: broken node element nesting validation in
  D-Bus introspection XML parsing
- Resolves: RHEL-190632</changelog>
</package>
<package pkgid="2c3cafcf65af316eeaea2f71e34de3dceb2332e6a14c710f055a7bc2a1b7e833" name="glib2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.2"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.68.4-16" date="1727352000">- Add support for x-gvfs-trash mount option
- Resolves: RHEL-52360</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-17" date="1752235200">- Add patches for CVE-2024-52533 and CVE-2025-4373
- Update GDateTime test for new tzdata
- Resolves: RHEL-94483
- Resolves: RHEL-102844</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.68.4-18" date="1758110400">- gdbusconnection: Prevent sending a serial of zero on overflow
- Resolves: RHEL-114059</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.2" date="1783598400">- Fix CVE-2026-58016: broken node element nesting validation in
  D-Bus introspection XML parsing
- Resolves: RHEL-190632</changelog>
</package>
<package pkgid="4c88ea1e38c7f24302b104eee6ee6990a566b1c56de0c276cfe51614a52fc221" name="glib2-debuginfo" arch="i686">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.9"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.2" date="1783598400">- Fix CVE-2026-58016: broken node element nesting validation in
  D-Bus introspection XML parsing
- Resolves: RHEL-190632</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.3" date="1784548800">- Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context
- Resolves: RHEL-212261</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.4" date="1784548801">- Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list
- Resolves: RHEL-190589</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.5" date="1784548802">- Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators
- Resolves: RHEL-212236</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.6" date="1784548803">- Fix CVE-2026-58011: range validation in g_date_time_add_full()
- Resolves: RHEL-212194</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.7" date="1784548804">- Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW
- Resolves: RHEL-212217</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.8" date="1784548805">- Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking
- Resolves: RHEL-212157</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.9" date="1785412800">- Fix CVE-2026-15588: limit D-Bus auth line read length</changelog>
</package>
<package pkgid="d80d87a90a719dcca79b60157c0dfd049a1a5a8cb07b50b418297fe7538777ea" name="glib2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.9"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.2" date="1783598400">- Fix CVE-2026-58016: broken node element nesting validation in
  D-Bus introspection XML parsing
- Resolves: RHEL-190632</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.3" date="1784548800">- Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context
- Resolves: RHEL-212261</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.4" date="1784548801">- Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list
- Resolves: RHEL-190589</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.5" date="1784548802">- Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators
- Resolves: RHEL-212236</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.6" date="1784548803">- Fix CVE-2026-58011: range validation in g_date_time_add_full()
- Resolves: RHEL-212194</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.7" date="1784548804">- Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW
- Resolves: RHEL-212217</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.8" date="1784548805">- Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking
- Resolves: RHEL-212157</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.9" date="1785412800">- Fix CVE-2026-15588: limit D-Bus auth line read length</changelog>
</package>
<package pkgid="ea3d11dc5dd6a2d268da352fa093d6ee8ced056e670224dd7088e26e9fe82c46" name="glib2-debugsource" arch="i686">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.1"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-15" date="1715601600">- Fix CVE-2024-34397, signal subscription vulnerabilities
- Resolves: RHEL-35775</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.68.4-16" date="1727352000">- Add support for x-gvfs-trash mount option
- Resolves: RHEL-52360</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-17" date="1752235200">- Add patches for CVE-2024-52533 and CVE-2025-4373
- Update GDateTime test for new tzdata
- Resolves: RHEL-94483
- Resolves: RHEL-102844</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.68.4-18" date="1758110400">- gdbusconnection: Prevent sending a serial of zero on overflow
- Resolves: RHEL-114059</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
</package>
<package pkgid="7cca27db528db324398774b0839bccae67a2b1babe37b0f99d1a28260f39ee3d" name="glib2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.1"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-15" date="1715601600">- Fix CVE-2024-34397, signal subscription vulnerabilities
- Resolves: RHEL-35775</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.68.4-16" date="1727352000">- Add support for x-gvfs-trash mount option
- Resolves: RHEL-52360</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-17" date="1752235200">- Add patches for CVE-2024-52533 and CVE-2025-4373
- Update GDateTime test for new tzdata
- Resolves: RHEL-94483
- Resolves: RHEL-102844</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.68.4-18" date="1758110400">- gdbusconnection: Prevent sending a serial of zero on overflow
- Resolves: RHEL-114059</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
</package>
<package pkgid="6312777282149615fa9bdbbeb12462cb960af2fd60f284a1a6be4846754cd133" name="glib2-debugsource" arch="i686">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.2"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.68.4-16" date="1727352000">- Add support for x-gvfs-trash mount option
- Resolves: RHEL-52360</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-17" date="1752235200">- Add patches for CVE-2024-52533 and CVE-2025-4373
- Update GDateTime test for new tzdata
- Resolves: RHEL-94483
- Resolves: RHEL-102844</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.68.4-18" date="1758110400">- gdbusconnection: Prevent sending a serial of zero on overflow
- Resolves: RHEL-114059</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.2" date="1783598400">- Fix CVE-2026-58016: broken node element nesting validation in
  D-Bus introspection XML parsing
- Resolves: RHEL-190632</changelog>
</package>
<package pkgid="f85d337c5e3e62bc7ae4183cf39490abe0836ead930cd7678bac31c6df736964" name="glib2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.2"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.68.4-16" date="1727352000">- Add support for x-gvfs-trash mount option
- Resolves: RHEL-52360</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-17" date="1752235200">- Add patches for CVE-2024-52533 and CVE-2025-4373
- Update GDateTime test for new tzdata
- Resolves: RHEL-94483
- Resolves: RHEL-102844</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.68.4-18" date="1758110400">- gdbusconnection: Prevent sending a serial of zero on overflow
- Resolves: RHEL-114059</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.2" date="1783598400">- Fix CVE-2026-58016: broken node element nesting validation in
  D-Bus introspection XML parsing
- Resolves: RHEL-190632</changelog>
</package>
<package pkgid="36f893abb126641ab3bbc34c3f3c409f15e5a144b3026bdf6867ec731dccd2a0" name="glib2-debugsource" arch="i686">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.9"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.2" date="1783598400">- Fix CVE-2026-58016: broken node element nesting validation in
  D-Bus introspection XML parsing
- Resolves: RHEL-190632</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.3" date="1784548800">- Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context
- Resolves: RHEL-212261</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.4" date="1784548801">- Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list
- Resolves: RHEL-190589</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.5" date="1784548802">- Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators
- Resolves: RHEL-212236</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.6" date="1784548803">- Fix CVE-2026-58011: range validation in g_date_time_add_full()
- Resolves: RHEL-212194</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.7" date="1784548804">- Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW
- Resolves: RHEL-212217</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.8" date="1784548805">- Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking
- Resolves: RHEL-212157</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.9" date="1785412800">- Fix CVE-2026-15588: limit D-Bus auth line read length</changelog>
</package>
<package pkgid="1d5e008d5693c70e7086d965e5a1a7e6c084d10481fedee7fbfdbe0f31dd2f71" name="glib2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.9"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.2" date="1783598400">- Fix CVE-2026-58016: broken node element nesting validation in
  D-Bus introspection XML parsing
- Resolves: RHEL-190632</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.3" date="1784548800">- Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context
- Resolves: RHEL-212261</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.4" date="1784548801">- Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list
- Resolves: RHEL-190589</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.5" date="1784548802">- Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators
- Resolves: RHEL-212236</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.6" date="1784548803">- Fix CVE-2026-58011: range validation in g_date_time_add_full()
- Resolves: RHEL-212194</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.7" date="1784548804">- Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW
- Resolves: RHEL-212217</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.8" date="1784548805">- Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking
- Resolves: RHEL-212157</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.9" date="1785412800">- Fix CVE-2026-15588: limit D-Bus auth line read length</changelog>
</package>
<package pkgid="93639a68300bce81315c980377a53abe5d1319498f1a9bdb44b379a42c44ccec" name="glib2-devel-debuginfo" arch="i686">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.1"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-15" date="1715601600">- Fix CVE-2024-34397, signal subscription vulnerabilities
- Resolves: RHEL-35775</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.68.4-16" date="1727352000">- Add support for x-gvfs-trash mount option
- Resolves: RHEL-52360</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-17" date="1752235200">- Add patches for CVE-2024-52533 and CVE-2025-4373
- Update GDateTime test for new tzdata
- Resolves: RHEL-94483
- Resolves: RHEL-102844</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.68.4-18" date="1758110400">- gdbusconnection: Prevent sending a serial of zero on overflow
- Resolves: RHEL-114059</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
</package>
<package pkgid="f5a35fa934cb866e37722e3a443fb10285803b41c0128d932481d61a1e64ada1" name="glib2-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.1"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-15" date="1715601600">- Fix CVE-2024-34397, signal subscription vulnerabilities
- Resolves: RHEL-35775</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.68.4-16" date="1727352000">- Add support for x-gvfs-trash mount option
- Resolves: RHEL-52360</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-17" date="1752235200">- Add patches for CVE-2024-52533 and CVE-2025-4373
- Update GDateTime test for new tzdata
- Resolves: RHEL-94483
- Resolves: RHEL-102844</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.68.4-18" date="1758110400">- gdbusconnection: Prevent sending a serial of zero on overflow
- Resolves: RHEL-114059</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
</package>
<package pkgid="095f24395154c823e229feb89bf0b026e2a5b0dd21d9b0e66919019009b63e51" name="glib2-devel-debuginfo" arch="i686">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.2"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.68.4-16" date="1727352000">- Add support for x-gvfs-trash mount option
- Resolves: RHEL-52360</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-17" date="1752235200">- Add patches for CVE-2024-52533 and CVE-2025-4373
- Update GDateTime test for new tzdata
- Resolves: RHEL-94483
- Resolves: RHEL-102844</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.68.4-18" date="1758110400">- gdbusconnection: Prevent sending a serial of zero on overflow
- Resolves: RHEL-114059</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.2" date="1783598400">- Fix CVE-2026-58016: broken node element nesting validation in
  D-Bus introspection XML parsing
- Resolves: RHEL-190632</changelog>
</package>
<package pkgid="5c5231729c85d54f7b39a52cb70f3a1e9eba09c44820396fc4506b765bed18cd" name="glib2-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.2"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.68.4-16" date="1727352000">- Add support for x-gvfs-trash mount option
- Resolves: RHEL-52360</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-17" date="1752235200">- Add patches for CVE-2024-52533 and CVE-2025-4373
- Update GDateTime test for new tzdata
- Resolves: RHEL-94483
- Resolves: RHEL-102844</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.68.4-18" date="1758110400">- gdbusconnection: Prevent sending a serial of zero on overflow
- Resolves: RHEL-114059</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.2" date="1783598400">- Fix CVE-2026-58016: broken node element nesting validation in
  D-Bus introspection XML parsing
- Resolves: RHEL-190632</changelog>
</package>
<package pkgid="669447807ac100e0262a6cd63f38f7ab2e26634b42c28dc2d0ecca500cb194e2" name="glib2-devel-debuginfo" arch="i686">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.9"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.2" date="1783598400">- Fix CVE-2026-58016: broken node element nesting validation in
  D-Bus introspection XML parsing
- Resolves: RHEL-190632</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.3" date="1784548800">- Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context
- Resolves: RHEL-212261</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.4" date="1784548801">- Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list
- Resolves: RHEL-190589</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.5" date="1784548802">- Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators
- Resolves: RHEL-212236</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.6" date="1784548803">- Fix CVE-2026-58011: range validation in g_date_time_add_full()
- Resolves: RHEL-212194</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.7" date="1784548804">- Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW
- Resolves: RHEL-212217</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.8" date="1784548805">- Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking
- Resolves: RHEL-212157</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.9" date="1785412800">- Fix CVE-2026-15588: limit D-Bus auth line read length</changelog>
</package>
<package pkgid="a044ffc73a41aacd5188290e1f247e6670585fa9e747c0c7f66b60a4301816fe" name="glib2-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.9"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.2" date="1783598400">- Fix CVE-2026-58016: broken node element nesting validation in
  D-Bus introspection XML parsing
- Resolves: RHEL-190632</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.3" date="1784548800">- Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context
- Resolves: RHEL-212261</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.4" date="1784548801">- Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list
- Resolves: RHEL-190589</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.5" date="1784548802">- Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators
- Resolves: RHEL-212236</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.6" date="1784548803">- Fix CVE-2026-58011: range validation in g_date_time_add_full()
- Resolves: RHEL-212194</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.7" date="1784548804">- Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW
- Resolves: RHEL-212217</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.8" date="1784548805">- Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking
- Resolves: RHEL-212157</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.9" date="1785412800">- Fix CVE-2026-15588: limit D-Bus auth line read length</changelog>
</package>
<package pkgid="ee9c73fab7be91b12ead98621c967061722d9cbb9c72ba95b450b9a576db2691" name="glib2-tests-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.1"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-15" date="1715601600">- Fix CVE-2024-34397, signal subscription vulnerabilities
- Resolves: RHEL-35775</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.68.4-16" date="1727352000">- Add support for x-gvfs-trash mount option
- Resolves: RHEL-52360</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-17" date="1752235200">- Add patches for CVE-2024-52533 and CVE-2025-4373
- Update GDateTime test for new tzdata
- Resolves: RHEL-94483
- Resolves: RHEL-102844</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.68.4-18" date="1758110400">- gdbusconnection: Prevent sending a serial of zero on overflow
- Resolves: RHEL-114059</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
</package>
<package pkgid="b9847ba0a8710d9737a084267e093d9819e873904e8bc1c197d9be420a1311da" name="glib2-tests-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.2"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.68.4-16" date="1727352000">- Add support for x-gvfs-trash mount option
- Resolves: RHEL-52360</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-17" date="1752235200">- Add patches for CVE-2024-52533 and CVE-2025-4373
- Update GDateTime test for new tzdata
- Resolves: RHEL-94483
- Resolves: RHEL-102844</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.68.4-18" date="1758110400">- gdbusconnection: Prevent sending a serial of zero on overflow
- Resolves: RHEL-114059</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.2" date="1783598400">- Fix CVE-2026-58016: broken node element nesting validation in
  D-Bus introspection XML parsing
- Resolves: RHEL-190632</changelog>
</package>
<package pkgid="e06edd73d07fdbb29e5e16f5e72df2777ae7659e9dfddebf7c8bd5e4645478fc" name="glib2-tests-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.68.4" rel="19.el9_8.9"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19" date="1768824000">- Add patch for CVE-2025-13601
- Fix GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.4-19.1" date="1777032000">- Add patch for CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.2" date="1783598400">- Fix CVE-2026-58016: broken node element nesting validation in
  D-Bus introspection XML parsing
- Resolves: RHEL-190632</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.3" date="1784548800">- Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context
- Resolves: RHEL-212261</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.4" date="1784548801">- Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list
- Resolves: RHEL-190589</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.5" date="1784548802">- Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators
- Resolves: RHEL-212236</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.6" date="1784548803">- Fix CVE-2026-58011: range validation in g_date_time_add_full()
- Resolves: RHEL-212194</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.7" date="1784548804">- Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW
- Resolves: RHEL-212217</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.8" date="1784548805">- Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking
- Resolves: RHEL-212157</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.68.4-19.9" date="1785412800">- Fix CVE-2026-15588: limit D-Bus auth line read length</changelog>
</package>
<package pkgid="73889f6b74fc3ee2bac3b26890eea8e1899edd3b5f362c1692fe17768cfb9b82" name="glibc-benchtests-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="b2c5d26faaf40519349e788c508188442cf177f7f1a3f722a799109c1c460b10" name="glibc-benchtests-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="8b39241c43a98f38c87bab60c18dd60ab9429b2e59a514ee93252345d5d04380" name="glibc-benchtests-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="2c78750d24756bc9bb05af247fc8283ec89db40a424130671d09ac2abbd453fe" name="glibc-benchtests-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="f096261468a6f1460f6437d2e11c77a8094d8fee629bf044f1811eed583ecae8" name="glibc-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="a757be1a39983ba7a0a084f94618af35c24e35f46abe4a34dc38f846641e5385" name="glibc-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="64fcf5f281bc89b5da13ea1fbc6fa443d6c5d0dcf68cbe0a65dde3e0e289e2b9" name="glibc-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="49d4b1470793855816ba041f52956c0468064ab678968dc80ed587ba94198811" name="glibc-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="7e873711b2fdcec9032ac7c1a21043beca31456ad34241e768e0defede0ac967" name="glibc-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="4b894d021c9e38f7be501eb5060a68c3d87af3af05e679f9da31c83e4c622200" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="8bfe89fe59fa7b277b9617cbc0d29a49a2836cc5d94d9ccf27ad129c075218bb" name="glibc-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="f2710e86a6f769737f47611c7bbd672f96d82fc8599dc7e27a4af206e98a4b60" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="badc997e4fa7e4eb108384aefb309ac8c746625de756113af4e76c9ca1fd11e1" name="glibc-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="853751eb703f5537805ee49a6c25bd961bd554295bdc9d3fdca21fc5e66ba877" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="ba1911f1b2d6285a957afbee9f9b841556c59bb2dda6e5720e4007b34a42f9bc" name="glibc-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="fb8f9e3bd4ad2e7f48d1b9b851350d7fb8165b1a62c6408f2722a2e80762bc69" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="905d30db6e26a7f84ffa6e8349dec7e92657ca8d469661a9cbbd7e82d1871f28" name="glibc-debugsource" arch="i686">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="36f92c1bbd1291cc3e3c67fc97fc41a17651b72b7100d4637f33de0a7c09ceb4" name="glibc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="7583c4895f928ca7ef4f2ad84c4a4628e35309c587ce92da40e01c8ee98daf2f" name="glibc-debugsource" arch="i686">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="23abaab3b2ba14e068d0990e18f0867b166751282fa69f2367ffb86034c35efe" name="glibc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="71ce9bb2d407c7f1737ec8695148bbc75a5a66140f60598088fe37881a0df5d1" name="glibc-debugsource" arch="i686">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="f3c795f3408fc6f33c9fad897f66325b8192597bc195e42c213ec7062cc6dadd" name="glibc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="e247780180bd5afcc6b067393eccfb4582910763894809e5937fd274d88ae40a" name="glibc-debugsource" arch="i686">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="7e997874127ac0181a240f157c981db70c993983962e800666d07232c4a4b10e" name="glibc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="820e2c36ec05b6d0d080dd62e28424eb2313f11fa4e82c1f0e48ae40fbb6edc9" name="glibc-gconv-extra-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="cf45700455d06d56eb9489cbafd6045a9dea5d1b77053dd8098d3d388af56380" name="glibc-gconv-extra-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="ff06b173816d48f8358bbb46bdb47696cf1cda97d25645dfdb1c1662578e21aa" name="glibc-gconv-extra-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="681bc45565149ba676d37b78f0f2315fe6a3441816ce5d5d26caafdb5eb07af0" name="glibc-gconv-extra-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="81acd1ac87eb4e7944519d7b5c60512dc032cc3ccd55906692966fe9676fb75a" name="glibc-gconv-extra-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="97882640e685e384d55ff5ddf009043e504a1a2ec748f9446b53850c85906d66" name="glibc-gconv-extra-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="02764ad05d8441bb4fd73bdda864f4d87be7bcebdc439fe7eaa3d33e092ff00a" name="glibc-gconv-extra-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="84be308fe6f6f6af2821dba6d60bf43090cdfefa8249b1495905f64937fa6f34" name="glibc-gconv-extra-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="be37df313f0326e2958d0de345d3ea8a61d5419e36a537f492dec99dc993e745" name="glibc-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="f3eff1eecc19284fa0e5ac2f0b334d668577386a61af06e8de8ebec4dcf99cd0" name="glibc-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="88a3022dadde2736dbf354c44eaae91a28ca8daf0a145e49a4d3205c4aa4371a" name="glibc-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="a337e0bf0ff548abfbd7ac1301d9de4789ff094503c31b7ff0930a2a43cbd909" name="glibc-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="f87d50733b814f7b3ddb15ce72a4a40592882129cdae27f631c936071bdedf1b" name="gnome-shell-debuginfo" arch="x86_64">
  <version epoch="0" ver="40.10" rel="35.el9_8.1"/>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.10-33" date="1763467200">- Register session with GDM on startup
  Resolves: RHEL-129287</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.10-34" date="1773057600">- Fix to automatically start fingerprint when enabled
  Resolves: RHEL-4166</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.10-35" date="1779710400">- Update fix of registering session
  Registering the display is needed too
  Resolves: RHEL-178703</changelog>
  <changelog author="Joan Tomas Pelka &lt;tpelka@redhat.com&gt; - 40.10-35.1" date="1780056000">- triggering a new build in correct target
  Resolves: RHEL-178703</changelog>
</package>
<package pkgid="f19f679cec7c3d81cb21e8489a6a121675fb09b4de1ef1f19ae943acd4872c42" name="gnome-shell-debugsource" arch="x86_64">
  <version epoch="0" ver="40.10" rel="35.el9_8.1"/>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.10-33" date="1763467200">- Register session with GDM on startup
  Resolves: RHEL-129287</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.10-34" date="1773057600">- Fix to automatically start fingerprint when enabled
  Resolves: RHEL-4166</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 40.10-35" date="1779710400">- Update fix of registering session
  Registering the display is needed too
  Resolves: RHEL-178703</changelog>
  <changelog author="Joan Tomas Pelka &lt;tpelka@redhat.com&gt; - 40.10-35.1" date="1780056000">- triggering a new build in correct target
  Resolves: RHEL-178703</changelog>
</package>
<package pkgid="33a4b36d552f02dee0c299d3f014f32e6059f018526d6b9fcaf984cf0f8f494d" name="gpsd-minimal-clients-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.26.1" rel="2.el9_8.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-1" date="1747656000">- update to 3.26.1 (RHEL-90132)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-2" date="1768824000">- fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
- fix integer underflow in handling of Navcom packets (CVE-2025-67269)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-2.el9_8.1" date="1783944000">- fix command injection in gpsprof (CVE-2026-58459)</changelog>
</package>
<package pkgid="d185743165728773f9eec9a698dd4198b38533df5bdc383860c2532e19986f61" name="gpsd-minimal-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.26.1" rel="2.el9_8.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-1" date="1747656000">- update to 3.26.1 (RHEL-90132)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-2" date="1768824000">- fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
- fix integer underflow in handling of Navcom packets (CVE-2025-67269)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-2.el9_8.1" date="1783944000">- fix command injection in gpsprof (CVE-2026-58459)</changelog>
</package>
<package pkgid="8ac1d4e40a2e7644430528ec97a2e8ffc596635704f5749d4318c4c4da8ef680" name="gpsd-minimal-debugsource" arch="x86_64">
  <version epoch="1" ver="3.26.1" rel="2.el9_8.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-1" date="1747656000">- update to 3.26.1 (RHEL-90132)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-2" date="1768824000">- fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
- fix integer underflow in handling of Navcom packets (CVE-2025-67269)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-2.el9_8.1" date="1783944000">- fix command injection in gpsprof (CVE-2026-58459)</changelog>
</package>
<package pkgid="e71e93d228fee32f7507717da77f303507647bce8df3e463fd186fe5012f0674" name="grafana-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.2.6" rel="22.el9_8"/>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-10" date="1738152000">- Resolves RHEL-75919: grafana selinux issue with autofs_t</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-11" date="1742904000">- Resolves RHEL-84636: CVE-2025-30204</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-12" date="1745928000">- Resolves RHEL-85419: Move grafana home directory to /var/lib/grafana</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-13" date="1747137600">- Resolves RHEL-89953: CVE-2025-4123</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-15" date="1750248000">- Resolves RHEL-97518: Rework grafana-selinux spec file sections
- Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-18" date="1764590400">- Resolves RHEL-125696: CVE-2025-58183
- Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-19" date="1769428800">- Resolves RHEL-140549: CVE-2025-61729</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-20" date="1771329600">- Resolves RHEL-144960: CVE-2026-21721
- Resolves RHEL-145419: CVE-2025-61728
- Resolves RHEL-146103: CVE-2025-61726
- Resolves RHEL-149639: CVE-2025-68121</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-21" date="1775044800">- Resolves RHEL-158767: CVE-2026-25679</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-22" date="1776859200">- Resolves RHEL-161803: CVE-2026-27877
- Resolves RHEL-166678: CVE-2026-32282
- Resolves RHEL-167678: CVE-2026-32283</changelog>
</package>
<package pkgid="cbc210c44525c187d285a678d03fd50fcf5a1e01bc2bf20b80a06c7fc711459d" name="grafana-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.2.6" rel="23.el9_8.1"/>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-12" date="1745928000">- Resolves RHEL-85419: Move grafana home directory to /var/lib/grafana</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-13" date="1747137600">- Resolves RHEL-89953: CVE-2025-4123</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-15" date="1750248000">- Resolves RHEL-97518: Rework grafana-selinux spec file sections
- Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-18" date="1764590400">- Resolves RHEL-125696: CVE-2025-58183
- Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-19" date="1769428800">- Resolves RHEL-140549: CVE-2025-61729</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-20" date="1771329600">- Resolves RHEL-144960: CVE-2026-21721
- Resolves RHEL-145419: CVE-2025-61728
- Resolves RHEL-146103: CVE-2025-61726
- Resolves RHEL-149639: CVE-2025-68121</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-21" date="1775044800">- Resolves RHEL-158767: CVE-2026-25679</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-22" date="1776859200">- Resolves RHEL-161803: CVE-2026-27877
- Resolves RHEL-166678: CVE-2026-32282
- Resolves RHEL-167678: CVE-2026-32283</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-23" date="1782993600">- Resolves RHEL-183803: CVE-2026-39821
- Resolves RHEL-188280</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 10.2.6-23.1" date="1785412800">- fix CVE-2026-42127: cap request body size and validate public dashboard access
- Resolves RHEL-219382</changelog>
</package>
<package pkgid="ea8573f22e2fece0d752e89ed20d45c4759f32230321946b0e0495fd5b21b79c" name="grafana-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.2.6" rel="23.el9_8"/>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-11" date="1742904000">- Resolves RHEL-84636: CVE-2025-30204</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-12" date="1745928000">- Resolves RHEL-85419: Move grafana home directory to /var/lib/grafana</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-13" date="1747137600">- Resolves RHEL-89953: CVE-2025-4123</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-15" date="1750248000">- Resolves RHEL-97518: Rework grafana-selinux spec file sections
- Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-18" date="1764590400">- Resolves RHEL-125696: CVE-2025-58183
- Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-19" date="1769428800">- Resolves RHEL-140549: CVE-2025-61729</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-20" date="1771329600">- Resolves RHEL-144960: CVE-2026-21721
- Resolves RHEL-145419: CVE-2025-61728
- Resolves RHEL-146103: CVE-2025-61726
- Resolves RHEL-149639: CVE-2025-68121</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-21" date="1775044800">- Resolves RHEL-158767: CVE-2026-25679</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-22" date="1776859200">- Resolves RHEL-161803: CVE-2026-27877
- Resolves RHEL-166678: CVE-2026-32282
- Resolves RHEL-167678: CVE-2026-32283</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-23" date="1782993600">- Resolves RHEL-183803: CVE-2026-39821
- Resolves RHEL-188280</changelog>
</package>
<package pkgid="b93075677f6de804860654ac206344de63d4010fdbaa048c963fcf6cc23cd9e2" name="grafana-debugsource" arch="x86_64">
  <version epoch="0" ver="10.2.6" rel="22.el9_8"/>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-10" date="1738152000">- Resolves RHEL-75919: grafana selinux issue with autofs_t</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-11" date="1742904000">- Resolves RHEL-84636: CVE-2025-30204</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-12" date="1745928000">- Resolves RHEL-85419: Move grafana home directory to /var/lib/grafana</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-13" date="1747137600">- Resolves RHEL-89953: CVE-2025-4123</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-15" date="1750248000">- Resolves RHEL-97518: Rework grafana-selinux spec file sections
- Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-18" date="1764590400">- Resolves RHEL-125696: CVE-2025-58183
- Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-19" date="1769428800">- Resolves RHEL-140549: CVE-2025-61729</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-20" date="1771329600">- Resolves RHEL-144960: CVE-2026-21721
- Resolves RHEL-145419: CVE-2025-61728
- Resolves RHEL-146103: CVE-2025-61726
- Resolves RHEL-149639: CVE-2025-68121</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-21" date="1775044800">- Resolves RHEL-158767: CVE-2026-25679</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-22" date="1776859200">- Resolves RHEL-161803: CVE-2026-27877
- Resolves RHEL-166678: CVE-2026-32282
- Resolves RHEL-167678: CVE-2026-32283</changelog>
</package>
<package pkgid="20804bc61d493ce7165207de9015f13a9b78a230d013469ad269ed748e840578" name="grafana-debugsource" arch="x86_64">
  <version epoch="0" ver="10.2.6" rel="23.el9_8.1"/>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-12" date="1745928000">- Resolves RHEL-85419: Move grafana home directory to /var/lib/grafana</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-13" date="1747137600">- Resolves RHEL-89953: CVE-2025-4123</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-15" date="1750248000">- Resolves RHEL-97518: Rework grafana-selinux spec file sections
- Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-18" date="1764590400">- Resolves RHEL-125696: CVE-2025-58183
- Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-19" date="1769428800">- Resolves RHEL-140549: CVE-2025-61729</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-20" date="1771329600">- Resolves RHEL-144960: CVE-2026-21721
- Resolves RHEL-145419: CVE-2025-61728
- Resolves RHEL-146103: CVE-2025-61726
- Resolves RHEL-149639: CVE-2025-68121</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-21" date="1775044800">- Resolves RHEL-158767: CVE-2026-25679</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-22" date="1776859200">- Resolves RHEL-161803: CVE-2026-27877
- Resolves RHEL-166678: CVE-2026-32282
- Resolves RHEL-167678: CVE-2026-32283</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-23" date="1782993600">- Resolves RHEL-183803: CVE-2026-39821
- Resolves RHEL-188280</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 10.2.6-23.1" date="1785412800">- fix CVE-2026-42127: cap request body size and validate public dashboard access
- Resolves RHEL-219382</changelog>
</package>
<package pkgid="c4827db62ff3e15547befb47b12e2cc5b0469bf6025bf99f057362c9d03f159d" name="grafana-debugsource" arch="x86_64">
  <version epoch="0" ver="10.2.6" rel="23.el9_8"/>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-11" date="1742904000">- Resolves RHEL-84636: CVE-2025-30204</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-12" date="1745928000">- Resolves RHEL-85419: Move grafana home directory to /var/lib/grafana</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-13" date="1747137600">- Resolves RHEL-89953: CVE-2025-4123</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-15" date="1750248000">- Resolves RHEL-97518: Rework grafana-selinux spec file sections
- Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-18" date="1764590400">- Resolves RHEL-125696: CVE-2025-58183
- Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-19" date="1769428800">- Resolves RHEL-140549: CVE-2025-61729</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-20" date="1771329600">- Resolves RHEL-144960: CVE-2026-21721
- Resolves RHEL-145419: CVE-2025-61728
- Resolves RHEL-146103: CVE-2025-61726
- Resolves RHEL-149639: CVE-2025-68121</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-21" date="1775044800">- Resolves RHEL-158767: CVE-2026-25679</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-22" date="1776859200">- Resolves RHEL-161803: CVE-2026-27877
- Resolves RHEL-166678: CVE-2026-32282
- Resolves RHEL-167678: CVE-2026-32283</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-23" date="1782993600">- Resolves RHEL-183803: CVE-2026-39821
- Resolves RHEL-188280</changelog>
</package>
<package pkgid="bc4532d371c0c986446001a7a5e9a80d9a963706ab64c4ce68f5faacfbfb15bb" name="grafana-pcp-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.1.1" rel="15.el9_8"/>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 5.1.1-2" date="1714996800">- fix CVE-2024-1394</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 5.1.1-3" date="1715083200">- bump release number</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-8" date="1720440000">- Add a premade uwsgi dashboard for the vector datasource</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-10" date="1729252800">- Resolves: RHEL-57931</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-11" date="1749556800">- Resolves RHEL-89310: CVE-2025-22871</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-12" date="1769428800">- Resolves RHEL-140550: CVE-2025-61729</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-13" date="1771329600">- Resolves RHEL-146104: CVE-2025-61726
- Resolves RHEL-149640: CVE-2025-68121</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-14" date="1775044800">- Resolves RHEL-158769: CVE-2026-25679</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-15" date="1776859200">- Resolves RHEL-166679: CVE-2026-32282
- Resolves RHEL-167679: CVE-2026-32283</changelog>
</package>
<package pkgid="89d0653d4aecd5b66ceb266a3f599c57cb4a78cf79f0f227ecd0a2d4e7034e8c" name="grafana-pcp-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.1.1" rel="17.el9_8"/>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-8" date="1720440000">- Add a premade uwsgi dashboard for the vector datasource</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-10" date="1729252800">- Resolves: RHEL-57931</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-11" date="1749556800">- Resolves RHEL-89310: CVE-2025-22871</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-12" date="1769428800">- Resolves RHEL-140550: CVE-2025-61729</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-13" date="1771329600">- Resolves RHEL-146104: CVE-2025-61726
- Resolves RHEL-149640: CVE-2025-68121</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-14" date="1775044800">- Resolves RHEL-158769: CVE-2026-25679</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-15" date="1776859200">- Resolves RHEL-166679: CVE-2026-32282
- Resolves RHEL-167679: CVE-2026-32283</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-16" date="1782216000">- Resolves RHEL-183820: CVE-2026-39821</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-17" date="1782993600">- Resolves RHEL-183820: CVE-2026-39821
- Resolves RHEL-188285</changelog>
</package>
<package pkgid="f4cfe3c642837948a5101439b94804e09ceca0362c49cd5d3934634dbcd3b6e1" name="grafana-pcp-debugsource" arch="x86_64">
  <version epoch="0" ver="5.1.1" rel="15.el9_8"/>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 5.1.1-2" date="1714996800">- fix CVE-2024-1394</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 5.1.1-3" date="1715083200">- bump release number</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-8" date="1720440000">- Add a premade uwsgi dashboard for the vector datasource</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-10" date="1729252800">- Resolves: RHEL-57931</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-11" date="1749556800">- Resolves RHEL-89310: CVE-2025-22871</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-12" date="1769428800">- Resolves RHEL-140550: CVE-2025-61729</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-13" date="1771329600">- Resolves RHEL-146104: CVE-2025-61726
- Resolves RHEL-149640: CVE-2025-68121</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-14" date="1775044800">- Resolves RHEL-158769: CVE-2026-25679</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-15" date="1776859200">- Resolves RHEL-166679: CVE-2026-32282
- Resolves RHEL-167679: CVE-2026-32283</changelog>
</package>
<package pkgid="02eaca4fc0174ba58f78e5ea13de39ba3981b754976f9f15168d647d939060d3" name="grafana-pcp-debugsource" arch="x86_64">
  <version epoch="0" ver="5.1.1" rel="17.el9_8"/>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-8" date="1720440000">- Add a premade uwsgi dashboard for the vector datasource</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-10" date="1729252800">- Resolves: RHEL-57931</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-11" date="1749556800">- Resolves RHEL-89310: CVE-2025-22871</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-12" date="1769428800">- Resolves RHEL-140550: CVE-2025-61729</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-13" date="1771329600">- Resolves RHEL-146104: CVE-2025-61726
- Resolves RHEL-149640: CVE-2025-68121</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-14" date="1775044800">- Resolves RHEL-158769: CVE-2026-25679</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-15" date="1776859200">- Resolves RHEL-166679: CVE-2026-32282
- Resolves RHEL-167679: CVE-2026-32283</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-16" date="1782216000">- Resolves RHEL-183820: CVE-2026-39821</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.1.1-17" date="1782993600">- Resolves RHEL-183820: CVE-2026-39821
- Resolves RHEL-188285</changelog>
</package>
<package pkgid="9e782f9611de41b68b21c933c06b5f15f1ba4cd397b9545fae753d1c461d59a9" name="gstreamer1-plugins-bad-free-debuginfo" arch="i686">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.1"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1748260800">- fix for CVE-2025-3887
  Resolves: RHEL-93059</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.1" date="1781870400">- Fix for CVE-2026-52720: validate framebuffer update rectangles
  in librfb plugin
  Resolves: RHEL-184459</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.2" date="1781870401">- Fix integer overflows in vmnc decoder (CVE-2026-52722)
  Resolves: RHEL-184422</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.3" date="1782129600">- Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read
  Resolves: RHEL-184403</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.4" date="1782302400">- Fix bytes/bits confusion in AV1 tile data size parsing
  (CVE-2026-52718)
  Resolves: RHEL-184388</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082
  in dvbsuboverlay and jpegparser
  Resolves: RHEL-156242, RHEL-156255</changelog>
</package>
<package pkgid="fa4490f7d31246956fb042d53b7eea8c4b4cd4244271cc4375c338a1b98cc89f" name="gstreamer1-plugins-bad-free-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.1"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1748260800">- fix for CVE-2025-3887
  Resolves: RHEL-93059</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.1" date="1781870400">- Fix for CVE-2026-52720: validate framebuffer update rectangles
  in librfb plugin
  Resolves: RHEL-184459</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.2" date="1781870401">- Fix integer overflows in vmnc decoder (CVE-2026-52722)
  Resolves: RHEL-184422</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.3" date="1782129600">- Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read
  Resolves: RHEL-184403</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.4" date="1782302400">- Fix bytes/bits confusion in AV1 tile data size parsing
  (CVE-2026-52718)
  Resolves: RHEL-184388</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082
  in dvbsuboverlay and jpegparser
  Resolves: RHEL-156242, RHEL-156255</changelog>
</package>
<package pkgid="7bb4782f72607c6bbb9a7d6d8ba3350e0b6b93588f4c44dbc0328eee5c4b2953" name="gstreamer1-plugins-bad-free-debuginfo" arch="i686">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.3"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1748260800">- fix for CVE-2025-3887
  Resolves: RHEL-93059</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.1" date="1781870400">- Fix for CVE-2026-52720: validate framebuffer update rectangles
  in librfb plugin
  Resolves: RHEL-184459</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.2" date="1781870401">- Fix integer overflows in vmnc decoder (CVE-2026-52722)
  Resolves: RHEL-184422</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.3" date="1782129600">- Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read
  Resolves: RHEL-184403</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.4" date="1782302400">- Fix bytes/bits confusion in AV1 tile data size parsing
  (CVE-2026-52718)
  Resolves: RHEL-184388</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082
  in dvbsuboverlay and jpegparser
  Resolves: RHEL-156242, RHEL-156255</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.2" date="1784116800">- Fix buffer overflow in DTLS connection peer certificate
  subject DN handling (CVE-2026-59692)
  Resolves: RHEL-193572</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.3" date="1785153600">- Fix incorrect bytes-per-pixel handling in rfbsrc plugin
  (CVE-2026-59691)
  Resolves: RHEL-193557</changelog>
</package>
<package pkgid="eafe9a2005b6282ef6fe830e305c2276bd58894254467c99ba55954d4567c2a5" name="gstreamer1-plugins-bad-free-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.3"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1748260800">- fix for CVE-2025-3887
  Resolves: RHEL-93059</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.1" date="1781870400">- Fix for CVE-2026-52720: validate framebuffer update rectangles
  in librfb plugin
  Resolves: RHEL-184459</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.2" date="1781870401">- Fix integer overflows in vmnc decoder (CVE-2026-52722)
  Resolves: RHEL-184422</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.3" date="1782129600">- Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read
  Resolves: RHEL-184403</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.4" date="1782302400">- Fix bytes/bits confusion in AV1 tile data size parsing
  (CVE-2026-52718)
  Resolves: RHEL-184388</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082
  in dvbsuboverlay and jpegparser
  Resolves: RHEL-156242, RHEL-156255</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.2" date="1784116800">- Fix buffer overflow in DTLS connection peer certificate
  subject DN handling (CVE-2026-59692)
  Resolves: RHEL-193572</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.3" date="1785153600">- Fix incorrect bytes-per-pixel handling in rfbsrc plugin
  (CVE-2026-59691)
  Resolves: RHEL-193557</changelog>
</package>
<package pkgid="4dfdb661c6ae1b32b2cb3ecc363730c9235b005c4dc9dbbb34a7796b916011f8" name="gstreamer1-plugins-bad-free-debugsource" arch="i686">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.1"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1748260800">- fix for CVE-2025-3887
  Resolves: RHEL-93059</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.1" date="1781870400">- Fix for CVE-2026-52720: validate framebuffer update rectangles
  in librfb plugin
  Resolves: RHEL-184459</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.2" date="1781870401">- Fix integer overflows in vmnc decoder (CVE-2026-52722)
  Resolves: RHEL-184422</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.3" date="1782129600">- Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read
  Resolves: RHEL-184403</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.4" date="1782302400">- Fix bytes/bits confusion in AV1 tile data size parsing
  (CVE-2026-52718)
  Resolves: RHEL-184388</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082
  in dvbsuboverlay and jpegparser
  Resolves: RHEL-156242, RHEL-156255</changelog>
</package>
<package pkgid="329ccdeb63f38e973ded5df7b06f25b23782cd9dfcb8ab66b3d8504f2bee13e2" name="gstreamer1-plugins-bad-free-debugsource" arch="x86_64">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.1"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1748260800">- fix for CVE-2025-3887
  Resolves: RHEL-93059</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.1" date="1781870400">- Fix for CVE-2026-52720: validate framebuffer update rectangles
  in librfb plugin
  Resolves: RHEL-184459</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.2" date="1781870401">- Fix integer overflows in vmnc decoder (CVE-2026-52722)
  Resolves: RHEL-184422</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.3" date="1782129600">- Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read
  Resolves: RHEL-184403</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.4" date="1782302400">- Fix bytes/bits confusion in AV1 tile data size parsing
  (CVE-2026-52718)
  Resolves: RHEL-184388</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082
  in dvbsuboverlay and jpegparser
  Resolves: RHEL-156242, RHEL-156255</changelog>
</package>
<package pkgid="8e628269727f62a0bea9ebad552725285eb4a580002c3520f166c8840e3f7c4f" name="gstreamer1-plugins-bad-free-debugsource" arch="i686">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.3"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1748260800">- fix for CVE-2025-3887
  Resolves: RHEL-93059</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.1" date="1781870400">- Fix for CVE-2026-52720: validate framebuffer update rectangles
  in librfb plugin
  Resolves: RHEL-184459</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.2" date="1781870401">- Fix integer overflows in vmnc decoder (CVE-2026-52722)
  Resolves: RHEL-184422</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.3" date="1782129600">- Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read
  Resolves: RHEL-184403</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.4" date="1782302400">- Fix bytes/bits confusion in AV1 tile data size parsing
  (CVE-2026-52718)
  Resolves: RHEL-184388</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082
  in dvbsuboverlay and jpegparser
  Resolves: RHEL-156242, RHEL-156255</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.2" date="1784116800">- Fix buffer overflow in DTLS connection peer certificate
  subject DN handling (CVE-2026-59692)
  Resolves: RHEL-193572</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.3" date="1785153600">- Fix incorrect bytes-per-pixel handling in rfbsrc plugin
  (CVE-2026-59691)
  Resolves: RHEL-193557</changelog>
</package>
<package pkgid="84ec51d18e5cc5de5dbb6c859ac86e43b3e2c00ca39366372aa811a08c105f38" name="gstreamer1-plugins-bad-free-debugsource" arch="x86_64">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.3"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1748260800">- fix for CVE-2025-3887
  Resolves: RHEL-93059</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.1" date="1781870400">- Fix for CVE-2026-52720: validate framebuffer update rectangles
  in librfb plugin
  Resolves: RHEL-184459</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.2" date="1781870401">- Fix integer overflows in vmnc decoder (CVE-2026-52722)
  Resolves: RHEL-184422</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.3" date="1782129600">- Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read
  Resolves: RHEL-184403</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.4" date="1782302400">- Fix bytes/bits confusion in AV1 tile data size parsing
  (CVE-2026-52718)
  Resolves: RHEL-184388</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082
  in dvbsuboverlay and jpegparser
  Resolves: RHEL-156242, RHEL-156255</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.2" date="1784116800">- Fix buffer overflow in DTLS connection peer certificate
  subject DN handling (CVE-2026-59692)
  Resolves: RHEL-193572</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.3" date="1785153600">- Fix incorrect bytes-per-pixel handling in rfbsrc plugin
  (CVE-2026-59691)
  Resolves: RHEL-193557</changelog>
</package>
<package pkgid="53fd4174d3a0c216dd5fb7fe7267e61ecf7bfbc19452f27f53ffd7c29825febc" name="gstreamer1-plugins-bad-free-libs-debuginfo" arch="i686">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.1"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1748260800">- fix for CVE-2025-3887
  Resolves: RHEL-93059</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.1" date="1781870400">- Fix for CVE-2026-52720: validate framebuffer update rectangles
  in librfb plugin
  Resolves: RHEL-184459</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.2" date="1781870401">- Fix integer overflows in vmnc decoder (CVE-2026-52722)
  Resolves: RHEL-184422</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.3" date="1782129600">- Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read
  Resolves: RHEL-184403</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.4" date="1782302400">- Fix bytes/bits confusion in AV1 tile data size parsing
  (CVE-2026-52718)
  Resolves: RHEL-184388</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082
  in dvbsuboverlay and jpegparser
  Resolves: RHEL-156242, RHEL-156255</changelog>
</package>
<package pkgid="090dd54042d748e05703af37b94c57224114ca43e0aba7e8e3b0a3f30862e26d" name="gstreamer1-plugins-bad-free-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.1"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1748260800">- fix for CVE-2025-3887
  Resolves: RHEL-93059</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.1" date="1781870400">- Fix for CVE-2026-52720: validate framebuffer update rectangles
  in librfb plugin
  Resolves: RHEL-184459</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.2" date="1781870401">- Fix integer overflows in vmnc decoder (CVE-2026-52722)
  Resolves: RHEL-184422</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.3" date="1782129600">- Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read
  Resolves: RHEL-184403</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.4" date="1782302400">- Fix bytes/bits confusion in AV1 tile data size parsing
  (CVE-2026-52718)
  Resolves: RHEL-184388</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082
  in dvbsuboverlay and jpegparser
  Resolves: RHEL-156242, RHEL-156255</changelog>
</package>
<package pkgid="bda28826413a8c7afbd0d43d2bd6eae5ab0bce05726763e6865fc34cf0be5906" name="gstreamer1-plugins-bad-free-libs-debuginfo" arch="i686">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.3"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1748260800">- fix for CVE-2025-3887
  Resolves: RHEL-93059</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.1" date="1781870400">- Fix for CVE-2026-52720: validate framebuffer update rectangles
  in librfb plugin
  Resolves: RHEL-184459</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.2" date="1781870401">- Fix integer overflows in vmnc decoder (CVE-2026-52722)
  Resolves: RHEL-184422</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.3" date="1782129600">- Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read
  Resolves: RHEL-184403</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.4" date="1782302400">- Fix bytes/bits confusion in AV1 tile data size parsing
  (CVE-2026-52718)
  Resolves: RHEL-184388</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082
  in dvbsuboverlay and jpegparser
  Resolves: RHEL-156242, RHEL-156255</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.2" date="1784116800">- Fix buffer overflow in DTLS connection peer certificate
  subject DN handling (CVE-2026-59692)
  Resolves: RHEL-193572</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.3" date="1785153600">- Fix incorrect bytes-per-pixel handling in rfbsrc plugin
  (CVE-2026-59691)
  Resolves: RHEL-193557</changelog>
</package>
<package pkgid="e29d7ebb0b62fea461cef58b59a8ea8f5c98de7d105f25db6d36fddcf9f25c94" name="gstreamer1-plugins-bad-free-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.3"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1748260800">- fix for CVE-2025-3887
  Resolves: RHEL-93059</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.1" date="1781870400">- Fix for CVE-2026-52720: validate framebuffer update rectangles
  in librfb plugin
  Resolves: RHEL-184459</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.2" date="1781870401">- Fix integer overflows in vmnc decoder (CVE-2026-52722)
  Resolves: RHEL-184422</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.3" date="1782129600">- Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read
  Resolves: RHEL-184403</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-4.4" date="1782302400">- Fix bytes/bits confusion in AV1 tile data size parsing
  (CVE-2026-52718)
  Resolves: RHEL-184388</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082
  in dvbsuboverlay and jpegparser
  Resolves: RHEL-156242, RHEL-156255</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.2" date="1784116800">- Fix buffer overflow in DTLS connection peer certificate
  subject DN handling (CVE-2026-59692)
  Resolves: RHEL-193572</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.3" date="1785153600">- Fix incorrect bytes-per-pixel handling in rfbsrc plugin
  (CVE-2026-59691)
  Resolves: RHEL-193557</changelog>
</package>
<package pkgid="23c74f3990fce3abb03a09c8d7eec98ec34a8b868ce900a40bfb81bdca70fb61" name="gstreamer1-plugins-good-debuginfo" arch="i686">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.1"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1734091200">- Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
  CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
  CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
  CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
  CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
  CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
- Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
- Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
- Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
- Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
- Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
- Resolves: RHEL-71189</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-5" date="1774612800">- Apply patches for CVE-2026-3083, CVE-2026-3085
  Resolves: RHEL-156267, RHEL-156266</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s
  (this branch had regressed to a stale pre-1.22.12 base)
  Resolves: RHEL-156269, RHEL-156270
- Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied
  on top of the correct 1.22.12 base
  Resolves: RHEL-184477</changelog>
</package>
<package pkgid="93bd3621eb88bb38313fa9115415274e9ec3d0d4bd3e32e33b5890a79541c8f4" name="gstreamer1-plugins-good-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.1"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1734091200">- Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
  CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
  CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
  CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
  CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
  CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
- Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
- Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
- Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
- Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
- Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
- Resolves: RHEL-71189</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-5" date="1774612800">- Apply patches for CVE-2026-3083, CVE-2026-3085
  Resolves: RHEL-156267, RHEL-156266</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s
  (this branch had regressed to a stale pre-1.22.12 base)
  Resolves: RHEL-156269, RHEL-156270
- Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied
  on top of the correct 1.22.12 base
  Resolves: RHEL-184477</changelog>
</package>
<package pkgid="fd07ad719de664be42d692ef27709a6b0392c829d525104f1be25778e85300b0" name="gstreamer1-plugins-good-debuginfo" arch="i686">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.2"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1734091200">- Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
  CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
  CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
  CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
  CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
  CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
- Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
- Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
- Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
- Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
- Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
- Resolves: RHEL-71189</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-5" date="1774612800">- Apply patches for CVE-2026-3083, CVE-2026-3085
  Resolves: RHEL-156267, RHEL-156266</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s
  (this branch had regressed to a stale pre-1.22.12 base)
  Resolves: RHEL-156269, RHEL-156270
- Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied
  on top of the correct 1.22.12 base
  Resolves: RHEL-184477</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.2" date="1786104000">- Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265
  depayloaders to prevent excessive memory usage
  Resolves: RHEL-224162</changelog>
</package>
<package pkgid="a0f0eb5399c6d927999ee4e91ddecf5e6a171e6cfe2d5635f59e49189803b4b4" name="gstreamer1-plugins-good-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.2"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1734091200">- Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
  CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
  CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
  CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
  CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
  CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
- Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
- Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
- Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
- Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
- Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
- Resolves: RHEL-71189</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-5" date="1774612800">- Apply patches for CVE-2026-3083, CVE-2026-3085
  Resolves: RHEL-156267, RHEL-156266</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s
  (this branch had regressed to a stale pre-1.22.12 base)
  Resolves: RHEL-156269, RHEL-156270
- Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied
  on top of the correct 1.22.12 base
  Resolves: RHEL-184477</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.2" date="1786104000">- Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265
  depayloaders to prevent excessive memory usage
  Resolves: RHEL-224162</changelog>
</package>
<package pkgid="82307b979c9337e6da6540f78150a05a0c4d95b6006acf58c0a7b950a5b14ef6" name="gstreamer1-plugins-good-debuginfo" arch="i686">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.4"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1734091200">- Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
  CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
  CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
  CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
  CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
  CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
- Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
- Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
- Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
- Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
- Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
- Resolves: RHEL-71189</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-5" date="1774612800">- Apply patches for CVE-2026-3083, CVE-2026-3085
  Resolves: RHEL-156267, RHEL-156266</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s
  (this branch had regressed to a stale pre-1.22.12 base)
  Resolves: RHEL-156269, RHEL-156270
- Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied
  on top of the correct 1.22.12 base
  Resolves: RHEL-184477</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.2" date="1786104000">- Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265
  depayloaders to prevent excessive memory usage
  Resolves: RHEL-224162</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.3" date="1786622400">- Fix CVE-2026-73433: add bounds checks to FUJIFILM strd metadata
  parsing in avidemux to prevent unsigned integer underflow
  Resolves: RHEL-239060</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.4" date="1786622401">- Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling
  Resolves: RHEL-239042</changelog>
</package>
<package pkgid="322d3f22e515891fd11044c37cc8703c3990ab0b17b321058b5209a96b25848b" name="gstreamer1-plugins-good-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.4"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1734091200">- Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
  CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
  CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
  CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
  CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
  CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
- Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
- Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
- Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
- Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
- Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
- Resolves: RHEL-71189</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-5" date="1774612800">- Apply patches for CVE-2026-3083, CVE-2026-3085
  Resolves: RHEL-156267, RHEL-156266</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s
  (this branch had regressed to a stale pre-1.22.12 base)
  Resolves: RHEL-156269, RHEL-156270
- Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied
  on top of the correct 1.22.12 base
  Resolves: RHEL-184477</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.2" date="1786104000">- Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265
  depayloaders to prevent excessive memory usage
  Resolves: RHEL-224162</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.3" date="1786622400">- Fix CVE-2026-73433: add bounds checks to FUJIFILM strd metadata
  parsing in avidemux to prevent unsigned integer underflow
  Resolves: RHEL-239060</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.4" date="1786622401">- Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling
  Resolves: RHEL-239042</changelog>
</package>
<package pkgid="2f09c6fe48d3a1ec68f6ff3f76bd21b21a8e6520ecfd44215f755132045102de" name="gstreamer1-plugins-good-debugsource" arch="i686">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.1"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1734091200">- Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
  CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
  CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
  CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
  CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
  CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
- Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
- Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
- Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
- Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
- Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
- Resolves: RHEL-71189</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-5" date="1774612800">- Apply patches for CVE-2026-3083, CVE-2026-3085
  Resolves: RHEL-156267, RHEL-156266</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s
  (this branch had regressed to a stale pre-1.22.12 base)
  Resolves: RHEL-156269, RHEL-156270
- Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied
  on top of the correct 1.22.12 base
  Resolves: RHEL-184477</changelog>
</package>
<package pkgid="367818ff91febd6a29390e47b0be26cfa3715e10b287b0774b4df2f2f71b61e1" name="gstreamer1-plugins-good-debugsource" arch="x86_64">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.1"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1734091200">- Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
  CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
  CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
  CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
  CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
  CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
- Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
- Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
- Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
- Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
- Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
- Resolves: RHEL-71189</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-5" date="1774612800">- Apply patches for CVE-2026-3083, CVE-2026-3085
  Resolves: RHEL-156267, RHEL-156266</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s
  (this branch had regressed to a stale pre-1.22.12 base)
  Resolves: RHEL-156269, RHEL-156270
- Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied
  on top of the correct 1.22.12 base
  Resolves: RHEL-184477</changelog>
</package>
<package pkgid="e6afdca8158d8551dd02271b55c6cd4a3f04952f040be6a0bf93a9920d881f21" name="gstreamer1-plugins-good-debugsource" arch="i686">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.2"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1734091200">- Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
  CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
  CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
  CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
  CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
  CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
- Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
- Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
- Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
- Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
- Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
- Resolves: RHEL-71189</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-5" date="1774612800">- Apply patches for CVE-2026-3083, CVE-2026-3085
  Resolves: RHEL-156267, RHEL-156266</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s
  (this branch had regressed to a stale pre-1.22.12 base)
  Resolves: RHEL-156269, RHEL-156270
- Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied
  on top of the correct 1.22.12 base
  Resolves: RHEL-184477</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.2" date="1786104000">- Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265
  depayloaders to prevent excessive memory usage
  Resolves: RHEL-224162</changelog>
</package>
<package pkgid="63303952ab780718b8176c9f705da494e3fb3ed4f7e74c702780d289bccb63a6" name="gstreamer1-plugins-good-debugsource" arch="x86_64">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.2"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1734091200">- Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
  CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
  CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
  CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
  CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
  CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
- Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
- Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
- Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
- Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
- Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
- Resolves: RHEL-71189</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-5" date="1774612800">- Apply patches for CVE-2026-3083, CVE-2026-3085
  Resolves: RHEL-156267, RHEL-156266</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s
  (this branch had regressed to a stale pre-1.22.12 base)
  Resolves: RHEL-156269, RHEL-156270
- Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied
  on top of the correct 1.22.12 base
  Resolves: RHEL-184477</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.2" date="1786104000">- Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265
  depayloaders to prevent excessive memory usage
  Resolves: RHEL-224162</changelog>
</package>
<package pkgid="8ac0af345c7581d823e039c31ec9ee27bb24791012ab82addde4e7fc68a8a490" name="gstreamer1-plugins-good-debugsource" arch="i686">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.4"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1734091200">- Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
  CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
  CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
  CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
  CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
  CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
- Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
- Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
- Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
- Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
- Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
- Resolves: RHEL-71189</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-5" date="1774612800">- Apply patches for CVE-2026-3083, CVE-2026-3085
  Resolves: RHEL-156267, RHEL-156266</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s
  (this branch had regressed to a stale pre-1.22.12 base)
  Resolves: RHEL-156269, RHEL-156270
- Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied
  on top of the correct 1.22.12 base
  Resolves: RHEL-184477</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.2" date="1786104000">- Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265
  depayloaders to prevent excessive memory usage
  Resolves: RHEL-224162</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.3" date="1786622400">- Fix CVE-2026-73433: add bounds checks to FUJIFILM strd metadata
  parsing in avidemux to prevent unsigned integer underflow
  Resolves: RHEL-239060</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.4" date="1786622401">- Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling
  Resolves: RHEL-239042</changelog>
</package>
<package pkgid="aa39dd9b31c1b381001ffe0cc8816f8a2ebac88134b39d1a5251aa5f381a929b" name="gstreamer1-plugins-good-debugsource" arch="x86_64">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.4"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1734091200">- Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
  CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
  CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
  CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
  CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
  CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
- Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
- Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
- Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
- Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
- Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
- Resolves: RHEL-71189</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-5" date="1774612800">- Apply patches for CVE-2026-3083, CVE-2026-3085
  Resolves: RHEL-156267, RHEL-156266</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s
  (this branch had regressed to a stale pre-1.22.12 base)
  Resolves: RHEL-156269, RHEL-156270
- Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied
  on top of the correct 1.22.12 base
  Resolves: RHEL-184477</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.2" date="1786104000">- Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265
  depayloaders to prevent excessive memory usage
  Resolves: RHEL-224162</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.3" date="1786622400">- Fix CVE-2026-73433: add bounds checks to FUJIFILM strd metadata
  parsing in avidemux to prevent unsigned integer underflow
  Resolves: RHEL-239060</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.4" date="1786622401">- Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling
  Resolves: RHEL-239042</changelog>
</package>
<package pkgid="fea917e4435bce2b98809ba9694131fea55452ddc74110ea3d1f2fd47c28e490" name="gstreamer1-plugins-good-gtk-debuginfo" arch="i686">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.1"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1734091200">- Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
  CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
  CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
  CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
  CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
  CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
- Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
- Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
- Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
- Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
- Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
- Resolves: RHEL-71189</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-5" date="1774612800">- Apply patches for CVE-2026-3083, CVE-2026-3085
  Resolves: RHEL-156267, RHEL-156266</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s
  (this branch had regressed to a stale pre-1.22.12 base)
  Resolves: RHEL-156269, RHEL-156270
- Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied
  on top of the correct 1.22.12 base
  Resolves: RHEL-184477</changelog>
</package>
<package pkgid="0b0786a054750f14861678d5deb32f3a03d3e96875135f4b62c8a1b71b668023" name="gstreamer1-plugins-good-gtk-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.1"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1734091200">- Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
  CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
  CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
  CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
  CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
  CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
- Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
- Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
- Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
- Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
- Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
- Resolves: RHEL-71189</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-5" date="1774612800">- Apply patches for CVE-2026-3083, CVE-2026-3085
  Resolves: RHEL-156267, RHEL-156266</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s
  (this branch had regressed to a stale pre-1.22.12 base)
  Resolves: RHEL-156269, RHEL-156270
- Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied
  on top of the correct 1.22.12 base
  Resolves: RHEL-184477</changelog>
</package>
<package pkgid="75b57906e596ac121e53c80d0a4286da273b3239d6d96462ff9ed84e108d67a2" name="gstreamer1-plugins-good-gtk-debuginfo" arch="i686">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.2"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1734091200">- Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
  CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
  CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
  CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
  CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
  CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
- Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
- Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
- Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
- Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
- Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
- Resolves: RHEL-71189</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-5" date="1774612800">- Apply patches for CVE-2026-3083, CVE-2026-3085
  Resolves: RHEL-156267, RHEL-156266</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s
  (this branch had regressed to a stale pre-1.22.12 base)
  Resolves: RHEL-156269, RHEL-156270
- Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied
  on top of the correct 1.22.12 base
  Resolves: RHEL-184477</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.2" date="1786104000">- Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265
  depayloaders to prevent excessive memory usage
  Resolves: RHEL-224162</changelog>
</package>
<package pkgid="2fae64781fc2037f7cee9750a50e344934ce5a71b0d0f265a2dcee1d2c82a3e3" name="gstreamer1-plugins-good-gtk-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.2"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1734091200">- Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
  CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
  CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
  CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
  CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
  CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
- Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
- Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
- Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
- Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
- Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
- Resolves: RHEL-71189</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-5" date="1774612800">- Apply patches for CVE-2026-3083, CVE-2026-3085
  Resolves: RHEL-156267, RHEL-156266</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s
  (this branch had regressed to a stale pre-1.22.12 base)
  Resolves: RHEL-156269, RHEL-156270
- Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied
  on top of the correct 1.22.12 base
  Resolves: RHEL-184477</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.2" date="1786104000">- Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265
  depayloaders to prevent excessive memory usage
  Resolves: RHEL-224162</changelog>
</package>
<package pkgid="73b767129344e89a1a80f4a136c9de3e923dfb412df33147b1827b635c9c5309" name="gstreamer1-plugins-good-gtk-debuginfo" arch="i686">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.4"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1734091200">- Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
  CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
  CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
  CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
  CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
  CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
- Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
- Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
- Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
- Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
- Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
- Resolves: RHEL-71189</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-5" date="1774612800">- Apply patches for CVE-2026-3083, CVE-2026-3085
  Resolves: RHEL-156267, RHEL-156266</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s
  (this branch had regressed to a stale pre-1.22.12 base)
  Resolves: RHEL-156269, RHEL-156270
- Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied
  on top of the correct 1.22.12 base
  Resolves: RHEL-184477</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.2" date="1786104000">- Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265
  depayloaders to prevent excessive memory usage
  Resolves: RHEL-224162</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.3" date="1786622400">- Fix CVE-2026-73433: add bounds checks to FUJIFILM strd metadata
  parsing in avidemux to prevent unsigned integer underflow
  Resolves: RHEL-239060</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.4" date="1786622401">- Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling
  Resolves: RHEL-239042</changelog>
</package>
<package pkgid="f48db769d38ec6a54a3f87f81974e8e9636b8923e14a641d86eade649a9aa746" name="gstreamer1-plugins-good-gtk-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.4"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1734091200">- Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
  CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
  CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
  CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
  CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
  CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
- Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
- Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
- Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
- Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
- Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
- Resolves: RHEL-71189</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-5" date="1774612800">- Apply patches for CVE-2026-3083, CVE-2026-3085
  Resolves: RHEL-156267, RHEL-156266</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s
  (this branch had regressed to a stale pre-1.22.12 base)
  Resolves: RHEL-156269, RHEL-156270
- Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied
  on top of the correct 1.22.12 base
  Resolves: RHEL-184477</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.2" date="1786104000">- Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265
  depayloaders to prevent excessive memory usage
  Resolves: RHEL-224162</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.3" date="1786622400">- Fix CVE-2026-73433: add bounds checks to FUJIFILM strd metadata
  parsing in avidemux to prevent unsigned integer underflow
  Resolves: RHEL-239060</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.4" date="1786622401">- Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling
  Resolves: RHEL-239042</changelog>
</package>
<package pkgid="ebd6d8e9f5bdf39f90ad1d5d119e2de277713e2ae9e2126b1db2ec4432cac970" name="gstreamer1-plugins-ugly-free-debuginfo" arch="i686">
  <version epoch="0" ver="1.22.12" rel="6.el9_8.1"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1774612800">- Add patch for CVE-2026-2920, CVE-2026-2922
  Resolves: RHEL-156061, RHEL-156274</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-5" date="1774872000">- Rebuild for z-stream
- Resolves: RHEL-156061, RHEL-156274</changelog>
  <changelog author="Veronika Kabatova &lt;vkabatov@redhat.com&gt; - 1.22.12-6" date="1774958400">- Rebuild to fix missing binaries due to buildsystem oversight</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-6.1" date="1782302400">- Fix CVE-2026-53704: multiple rmdemux security issues
- Resolves: RHEL-184464</changelog>
</package>
<package pkgid="4dbd5b4a6321fa81c4285cdd3aca0762529d939b3d48b2ac2c0699e6d7660340" name="gstreamer1-plugins-ugly-free-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.22.12" rel="6.el9_8.1"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1774612800">- Add patch for CVE-2026-2920, CVE-2026-2922
  Resolves: RHEL-156061, RHEL-156274</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-5" date="1774872000">- Rebuild for z-stream
- Resolves: RHEL-156061, RHEL-156274</changelog>
  <changelog author="Veronika Kabatova &lt;vkabatov@redhat.com&gt; - 1.22.12-6" date="1774958400">- Rebuild to fix missing binaries due to buildsystem oversight</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-6.1" date="1782302400">- Fix CVE-2026-53704: multiple rmdemux security issues
- Resolves: RHEL-184464</changelog>
</package>
<package pkgid="e9a33d24ea7010bb6e8688fa4af7dec956c3d865f5b94865a42300a66ab56fdb" name="gstreamer1-plugins-ugly-free-debugsource" arch="i686">
  <version epoch="0" ver="1.22.12" rel="6.el9_8.1"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1774612800">- Add patch for CVE-2026-2920, CVE-2026-2922
  Resolves: RHEL-156061, RHEL-156274</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-5" date="1774872000">- Rebuild for z-stream
- Resolves: RHEL-156061, RHEL-156274</changelog>
  <changelog author="Veronika Kabatova &lt;vkabatov@redhat.com&gt; - 1.22.12-6" date="1774958400">- Rebuild to fix missing binaries due to buildsystem oversight</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-6.1" date="1782302400">- Fix CVE-2026-53704: multiple rmdemux security issues
- Resolves: RHEL-184464</changelog>
</package>
<package pkgid="fda24b45e1d1d28cc9446bfdbecb629e0cf40a4d37f5d6562b6d6282efc094e3" name="gstreamer1-plugins-ugly-free-debugsource" arch="x86_64">
  <version epoch="0" ver="1.22.12" rel="6.el9_8.1"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1774612800">- Add patch for CVE-2026-2920, CVE-2026-2922
  Resolves: RHEL-156061, RHEL-156274</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-5" date="1774872000">- Rebuild for z-stream
- Resolves: RHEL-156061, RHEL-156274</changelog>
  <changelog author="Veronika Kabatova &lt;vkabatov@redhat.com&gt; - 1.22.12-6" date="1774958400">- Rebuild to fix missing binaries due to buildsystem oversight</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-6.1" date="1782302400">- Fix CVE-2026-53704: multiple rmdemux security issues
- Resolves: RHEL-184464</changelog>
</package>
<package pkgid="1548c7d166e131b8f6a43fd153daa58dcf10e1d1c786b542fdccf73670f4c0ca" name="ha-cloud-support-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-101" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128926</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-102" date="1767355200">- bundled urllib3: fix CVE-2025-66418
  Resolves: RHEL-136069</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768910400">- bundled urllib3: fix CVE-2025-66471
- bundled urllib3: fix CVE-2026-21441
  Resolves: RHEL-139799, RHEL-140796</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
</package>
<package pkgid="bc2499298efa47dd6ac68f515ed6664858b45fed4ce45ec5bd5c429d6ea88006" name="ha-cloud-support-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768910400">- bundled urllib3: fix CVE-2025-66471
- bundled urllib3: fix CVE-2026-21441
  Resolves: RHEL-139799, RHEL-140796</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
  <changelog author="Arslan Ahmad &lt;arahmad@redhat.com&gt; - 4.10.0-110.4" date="1782129600">- fence_openstack: fix list-action to avoid timeout when
  there are 100+ VMs on the hypervisor
  Resolves: RHEL-186320</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.5" date="1784116800">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193808</changelog>
</package>
<package pkgid="003febf60f4dbea23dfc79f8e2f0ab37c50bcec00b799a75ca278153cf3041b5" name="ha-cloud-support-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="110.el9_8.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769515200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142460</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145088</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1770292800">- bundled urllib3: fix issue with CVE-2026-21441 patch
  Resolves: RHEL-146282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110" date="1770724800">- bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471,
  CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs
  Resolves: RHEL-146344</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.1" date="1776340800">- bundled cryptography: replace with dependency to fix CVE-2026-26007
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-167241, RHEL-155676</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.2" date="1777464000">- bundled pyasn1: fix CVE-2026-30922
  Resolves: RHEL-157202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.3" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182313</changelog>
  <changelog author="Arslan Ahmad &lt;arahmad@redhat.com&gt; - 4.10.0-110.4" date="1782129600">- fence_openstack: fix list-action to avoid timeout when
  there are 100+ VMs on the hypervisor
  Resolves: RHEL-186320</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.5" date="1784116800">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193808</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-110.6" date="1785412800">- bundled pyasn1: fix CVE-2026-59886
  Resolves: RHEL-217934</changelog>
</package>
<package pkgid="56d43e940a9a83d5076754637dfd53517b00d95af20110840873105d2421dde9" name="hplip-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.21.2" rel="6.el9_8.4"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.1" date="1779883200">- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
  via OS command injection in Is_Process_Running()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.2" date="1781092800">- CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation
  via integer overflow in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.3" date="1781265600">- OSH fixes after CVE-2026-8631</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.4" date="1781524800">- Fix more leaks in hpcups</changelog>
</package>
<package pkgid="5992173d7b9ab9eea5acd9fe550a263bc68e4cfeb06efc23f7e3ff54bb1cac76" name="hplip-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.21.2" rel="6.el9_8.5"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.1" date="1779883200">- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
  via OS command injection in Is_Process_Running()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.2" date="1781092800">- CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation
  via integer overflow in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.3" date="1781265600">- OSH fixes after CVE-2026-8631</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.4" date="1781524800">- Fix more leaks in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.5" date="1783080000">- RHEL-192001 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631</changelog>
</package>
<package pkgid="f265227762112c2f6d61dcf08738543abf65c9ff24cdb0e7ec1de359a199999a" name="hplip-debugsource" arch="i686">
  <version epoch="0" ver="3.21.2" rel="6.el9_8.4"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.1" date="1779883200">- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
  via OS command injection in Is_Process_Running()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.2" date="1781092800">- CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation
  via integer overflow in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.3" date="1781265600">- OSH fixes after CVE-2026-8631</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.4" date="1781524800">- Fix more leaks in hpcups</changelog>
</package>
<package pkgid="0e3f00267a5517a88ee71c62344ffc0d83c9437075eb350bcb8afebf80070bab" name="hplip-debugsource" arch="x86_64">
  <version epoch="0" ver="3.21.2" rel="6.el9_8.4"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.1" date="1779883200">- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
  via OS command injection in Is_Process_Running()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.2" date="1781092800">- CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation
  via integer overflow in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.3" date="1781265600">- OSH fixes after CVE-2026-8631</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.4" date="1781524800">- Fix more leaks in hpcups</changelog>
</package>
<package pkgid="f9907e81d054a3820eede3efba8701bd76758b3ad0ff2e81e9f696d67df62c8e" name="hplip-debugsource" arch="i686">
  <version epoch="0" ver="3.21.2" rel="6.el9_8.5"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.1" date="1779883200">- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
  via OS command injection in Is_Process_Running()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.2" date="1781092800">- CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation
  via integer overflow in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.3" date="1781265600">- OSH fixes after CVE-2026-8631</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.4" date="1781524800">- Fix more leaks in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.5" date="1783080000">- RHEL-192001 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631</changelog>
</package>
<package pkgid="ce1be883f9788129a22d74ceb446e38456aa459ad2ce7b6b4d1daf6993d45f97" name="hplip-debugsource" arch="x86_64">
  <version epoch="0" ver="3.21.2" rel="6.el9_8.5"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.1" date="1779883200">- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
  via OS command injection in Is_Process_Running()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.2" date="1781092800">- CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation
  via integer overflow in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.3" date="1781265600">- OSH fixes after CVE-2026-8631</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.4" date="1781524800">- Fix more leaks in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.5" date="1783080000">- RHEL-192001 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631</changelog>
</package>
<package pkgid="a78cdc699714ef69eace2a6b75ec9de4a896b51d0d6d2e9ec196105e72726b40" name="hplip-libs-debuginfo" arch="i686">
  <version epoch="0" ver="3.21.2" rel="6.el9_8.4"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.1" date="1779883200">- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
  via OS command injection in Is_Process_Running()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.2" date="1781092800">- CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation
  via integer overflow in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.3" date="1781265600">- OSH fixes after CVE-2026-8631</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.4" date="1781524800">- Fix more leaks in hpcups</changelog>
</package>
<package pkgid="acccd9edbb0657f21c954eb8171035d292c88eb97fee0efc058034bc69fe661a" name="hplip-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.21.2" rel="6.el9_8.4"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.1" date="1779883200">- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
  via OS command injection in Is_Process_Running()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.2" date="1781092800">- CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation
  via integer overflow in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.3" date="1781265600">- OSH fixes after CVE-2026-8631</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.4" date="1781524800">- Fix more leaks in hpcups</changelog>
</package>
<package pkgid="7b7668a9236546230f84336b8a00b297d195c5d73c4d4cea47c604d2a68a2584" name="hplip-libs-debuginfo" arch="i686">
  <version epoch="0" ver="3.21.2" rel="6.el9_8.5"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.1" date="1779883200">- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
  via OS command injection in Is_Process_Running()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.2" date="1781092800">- CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation
  via integer overflow in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.3" date="1781265600">- OSH fixes after CVE-2026-8631</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.4" date="1781524800">- Fix more leaks in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.5" date="1783080000">- RHEL-192001 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631</changelog>
</package>
<package pkgid="74a3b4bb17f8f0aaa815d5bed172530defc21e28860c9312a47359128a0cafa0" name="hplip-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.21.2" rel="6.el9_8.5"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.1" date="1779883200">- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
  via OS command injection in Is_Process_Running()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.2" date="1781092800">- CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation
  via integer overflow in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.3" date="1781265600">- OSH fixes after CVE-2026-8631</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.4" date="1781524800">- Fix more leaks in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.5" date="1783080000">- RHEL-192001 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631</changelog>
</package>
<package pkgid="d3c2a1939b8c05af174214345c20cab4b4a536bad74c009a8fd1a97108b9c857" name="httpd-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.62" rel="13.el9_8.1"/>
  <changelog author="Joe Orton  &lt;jorton@redhat.com&gt; - 2.4.62-5" date="1749211200">- mod_dav: add dav_get_base_path() API
- Resolves: RHEL-41069</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-6" date="1753790400">- Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-7" date="1755345600">- Resolves: RHEL-99815 - stickysession field does not work when specifying
  it in the query parameter after upgrade to 9.5
- Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99968 - httpd: access control bypass by trusted
  clients is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-8" date="1760356800">- Resolves: RHEL-114501 Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-9" date="1761307200">- Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-10" date="1762430400">- Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix
- mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-11" date="1766145600">- Resolves: RHEL-131827 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-12" date="1767873600">- Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13" date="1770897600">- Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.1" date="1778500800">- Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
</package>
<package pkgid="bb43c726fffebba077ac5852ecc6d0ebae5a58522592611d0ed2bf6794c6f953" name="httpd-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.62" rel="13.el9_8.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-9" date="1761307200">- Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-10" date="1762430400">- Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix
- mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-11" date="1766145600">- Resolves: RHEL-131827 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-12" date="1767873600">- Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13" date="1770897600">- Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.1" date="1778500800">- Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.4.62-13.2" date="1782302400">- Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures
  (CVE-2026-44631)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.4.62-13.3" date="1782475200">- Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling
  vulnerability (CVE-2026-34355)
- Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery
  (CVE-2026-29169)
- Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto
  (CVE-2026-42536)
- Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement
  bug in mod_ssl (CVE-2026-44185)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.4" date="1782820800">- Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-182578 - httpd: incomplete fix
  for CVE-2023-38709 (CVE-2024-42516)
- Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951,
  CVE-2026-44119, CVE-2026-44186</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.5" date="1783598400">- Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix</changelog>
</package>
<package pkgid="c6309ae4433357cc54cbf1481c4170330c42e2068130c1cb8895affef046ced0" name="httpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.62" rel="13.el9_8.1"/>
  <changelog author="Joe Orton  &lt;jorton@redhat.com&gt; - 2.4.62-5" date="1749211200">- mod_dav: add dav_get_base_path() API
- Resolves: RHEL-41069</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-6" date="1753790400">- Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-7" date="1755345600">- Resolves: RHEL-99815 - stickysession field does not work when specifying
  it in the query parameter after upgrade to 9.5
- Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99968 - httpd: access control bypass by trusted
  clients is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-8" date="1760356800">- Resolves: RHEL-114501 Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-9" date="1761307200">- Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-10" date="1762430400">- Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix
- mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-11" date="1766145600">- Resolves: RHEL-131827 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-12" date="1767873600">- Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13" date="1770897600">- Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.1" date="1778500800">- Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
</package>
<package pkgid="a7f7ac0262c1317b010599d8e2050071ef50287d7430209ea6197a757a1e6ed7" name="httpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.62" rel="13.el9_8.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-9" date="1761307200">- Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-10" date="1762430400">- Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix
- mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-11" date="1766145600">- Resolves: RHEL-131827 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-12" date="1767873600">- Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13" date="1770897600">- Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.1" date="1778500800">- Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.4.62-13.2" date="1782302400">- Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures
  (CVE-2026-44631)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.4.62-13.3" date="1782475200">- Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling
  vulnerability (CVE-2026-34355)
- Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery
  (CVE-2026-29169)
- Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto
  (CVE-2026-42536)
- Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement
  bug in mod_ssl (CVE-2026-44185)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.4" date="1782820800">- Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-182578 - httpd: incomplete fix
  for CVE-2023-38709 (CVE-2024-42516)
- Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951,
  CVE-2026-44119, CVE-2026-44186</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.5" date="1783598400">- Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix</changelog>
</package>
<package pkgid="c33a8c9968df1fbfc6cbe670ad6e31d874c4df77bd48cb0764543d446e5286ea" name="httpd-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.62" rel="13.el9_8.1"/>
  <changelog author="Joe Orton  &lt;jorton@redhat.com&gt; - 2.4.62-5" date="1749211200">- mod_dav: add dav_get_base_path() API
- Resolves: RHEL-41069</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-6" date="1753790400">- Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-7" date="1755345600">- Resolves: RHEL-99815 - stickysession field does not work when specifying
  it in the query parameter after upgrade to 9.5
- Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99968 - httpd: access control bypass by trusted
  clients is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-8" date="1760356800">- Resolves: RHEL-114501 Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-9" date="1761307200">- Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-10" date="1762430400">- Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix
- mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-11" date="1766145600">- Resolves: RHEL-131827 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-12" date="1767873600">- Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13" date="1770897600">- Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.1" date="1778500800">- Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
</package>
<package pkgid="2d7396cf5ce28eee94a4a148d1e139c4097c160da3e0fb517d2120aadbfb0d7e" name="httpd-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.62" rel="13.el9_8.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-9" date="1761307200">- Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-10" date="1762430400">- Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix
- mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-11" date="1766145600">- Resolves: RHEL-131827 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-12" date="1767873600">- Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13" date="1770897600">- Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.1" date="1778500800">- Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.4.62-13.2" date="1782302400">- Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures
  (CVE-2026-44631)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.4.62-13.3" date="1782475200">- Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling
  vulnerability (CVE-2026-34355)
- Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery
  (CVE-2026-29169)
- Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto
  (CVE-2026-42536)
- Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement
  bug in mod_ssl (CVE-2026-44185)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.4" date="1782820800">- Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-182578 - httpd: incomplete fix
  for CVE-2023-38709 (CVE-2024-42516)
- Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951,
  CVE-2026-44119, CVE-2026-44186</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.5" date="1783598400">- Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix</changelog>
</package>
<package pkgid="77a344afacaae3f2021425bed31150b785dd61462ac4a2ba49ece5b854e869cf" name="httpd-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.62" rel="13.el9_8.1"/>
  <changelog author="Joe Orton  &lt;jorton@redhat.com&gt; - 2.4.62-5" date="1749211200">- mod_dav: add dav_get_base_path() API
- Resolves: RHEL-41069</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-6" date="1753790400">- Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-7" date="1755345600">- Resolves: RHEL-99815 - stickysession field does not work when specifying
  it in the query parameter after upgrade to 9.5
- Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99968 - httpd: access control bypass by trusted
  clients is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-8" date="1760356800">- Resolves: RHEL-114501 Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-9" date="1761307200">- Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-10" date="1762430400">- Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix
- mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-11" date="1766145600">- Resolves: RHEL-131827 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-12" date="1767873600">- Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13" date="1770897600">- Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.1" date="1778500800">- Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
</package>
<package pkgid="9b15108d8dc2b4f6d25e8f589c2de4531e919af4f42a0260928b732a3d032c04" name="httpd-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.62" rel="13.el9_8.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-9" date="1761307200">- Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-10" date="1762430400">- Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix
- mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-11" date="1766145600">- Resolves: RHEL-131827 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-12" date="1767873600">- Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13" date="1770897600">- Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.1" date="1778500800">- Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.4.62-13.2" date="1782302400">- Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures
  (CVE-2026-44631)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.4.62-13.3" date="1782475200">- Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling
  vulnerability (CVE-2026-34355)
- Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery
  (CVE-2026-29169)
- Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto
  (CVE-2026-42536)
- Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement
  bug in mod_ssl (CVE-2026-44185)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.4" date="1782820800">- Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-182578 - httpd: incomplete fix
  for CVE-2023-38709 (CVE-2024-42516)
- Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951,
  CVE-2026-44119, CVE-2026-44186</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.5" date="1783598400">- Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix</changelog>
</package>
<package pkgid="a6e37bac509fbdbb916ae7b200ef11a32ce0937c729b9baeb6e6ddb3dfe595d5" name="ibacm-debuginfo" arch="x86_64">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="cabac05d7b8221ddc6233f7cd67143927f7116880f971b74f5757c88dfde49fc" name="image-builder-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.1" rel="1.el9_8"/>
</package>
<package pkgid="aa96bd9fd2455758f639728f58a557608370c7dcbc21dc6d547ae35801181c64" name="image-builder-debugsource" arch="x86_64">
  <version epoch="0" ver="52.1" rel="1.el9_8"/>
</package>
<package pkgid="a219d2cf5887b6f0d0c3c87b68dc4c19990d6795754191a7d076472caab09eeb" name="integritysetup-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="3.el9"/>
  <changelog author="Daniel Zatovic &lt;dzatovic@redhat.com&gt; - 2.7.2-1" date="1714651200">- Update to cryptsetup 2.7.2
- Use OpenSLL Argon implementation instead of the built-in one
- Resolves: RHEL-32377</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-2" date="1724932800">- patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
- patch: Enable Argon2 in FIPS with openssl backend.
- patch: Abort online reencryption for misconfigured devices.
- patch: Harden online reencryption checks in initialization phase.
- patch: Fix detection of direct-io with suspended devices.
- patch: Return suspended status also for unknow target types.
- patch: Do not handle device as suspended on error.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-3" date="1725278400">- Specbump for correct target release.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-4" date="1749038400">- patch: Ignore unknown VMK entry 24 in bitlk metadata.
- Resolves: RHEL-94860</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-1" date="1756900800">- Update to cryptsetup 2.8.1.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-2" date="1757678400">- patch: Improve check for a function attribute support.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-3" date="1766059200">- patch: Read integrity profile info from top level device.
- patch: Fix possible use of uninitialized variable.
- patch: Reinstate pbkdf serialization flag in device activation.
- patch: Fix LUKS2 device status in inline HW mode and detached header.
- patch: Set inline integrity flag if no underlying dm-integrity device.
- patch: Fix wrong device size status reports in cryptsetup and integritysetup.
- Resolves: RHEL-122297 RHEL-125152 RHEL-125167 RHEL-132585 RHEL-140106</changelog>
</package>
<package pkgid="a2af79dfed85747a4668e734f9cf41d2bbf77317c0fc8af58a266bc7f8583120" name="iperf3-debuginfo" arch="i686">
  <version epoch="0" ver="3.9" rel="17.el9_8"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-12" date="1717502400">- Resolves: RHEL-39975 - possible denial of service</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-13" date="1718107200">- Resolves: RHEL-29579 - vulnerable to marvin attack if the authentication option is used</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-14" date="1736424000">- Resolves: RHEL-72933 - Denial of Service in iperf Due to Improper JSON Handling</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-15" date="1768910400">- Resolves: RHEL-136179 - iperf Heap Buffer Overflow (CVE-2025-54349)</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-16" date="1768910401">- Resolves: RHEL-132941 - iperf3 broken once "--logfile" is specified on server side</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-17" date="1776081600">- Resolves: RHEL-151875 - authentication no longer works with the new openssl</changelog>
</package>
<package pkgid="864ca323f4b66b266e3ce72d3e283b7c1025aa1b73a602bd3922990fdfe3b00a" name="iperf3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.9" rel="17.el9_8"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-12" date="1717502400">- Resolves: RHEL-39975 - possible denial of service</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-13" date="1718107200">- Resolves: RHEL-29579 - vulnerable to marvin attack if the authentication option is used</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-14" date="1736424000">- Resolves: RHEL-72933 - Denial of Service in iperf Due to Improper JSON Handling</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-15" date="1768910400">- Resolves: RHEL-136179 - iperf Heap Buffer Overflow (CVE-2025-54349)</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-16" date="1768910401">- Resolves: RHEL-132941 - iperf3 broken once "--logfile" is specified on server side</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-17" date="1776081600">- Resolves: RHEL-151875 - authentication no longer works with the new openssl</changelog>
</package>
<package pkgid="2725acdf299fbdeb85e46305f9235c87da5220aa628085e8a0d5840419b54ea2" name="iperf3-debugsource" arch="i686">
  <version epoch="0" ver="3.9" rel="17.el9_8"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-12" date="1717502400">- Resolves: RHEL-39975 - possible denial of service</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-13" date="1718107200">- Resolves: RHEL-29579 - vulnerable to marvin attack if the authentication option is used</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-14" date="1736424000">- Resolves: RHEL-72933 - Denial of Service in iperf Due to Improper JSON Handling</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-15" date="1768910400">- Resolves: RHEL-136179 - iperf Heap Buffer Overflow (CVE-2025-54349)</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-16" date="1768910401">- Resolves: RHEL-132941 - iperf3 broken once "--logfile" is specified on server side</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-17" date="1776081600">- Resolves: RHEL-151875 - authentication no longer works with the new openssl</changelog>
</package>
<package pkgid="4232f310543388f65500601648c89a16ceb0a4b512a0df1b9e728ce5c70ed1d1" name="iperf3-debugsource" arch="x86_64">
  <version epoch="0" ver="3.9" rel="17.el9_8"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-12" date="1717502400">- Resolves: RHEL-39975 - possible denial of service</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-13" date="1718107200">- Resolves: RHEL-29579 - vulnerable to marvin attack if the authentication option is used</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-14" date="1736424000">- Resolves: RHEL-72933 - Denial of Service in iperf Due to Improper JSON Handling</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-15" date="1768910400">- Resolves: RHEL-136179 - iperf Heap Buffer Overflow (CVE-2025-54349)</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-16" date="1768910401">- Resolves: RHEL-132941 - iperf3 broken once "--logfile" is specified on server side</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-17" date="1776081600">- Resolves: RHEL-151875 - authentication no longer works with the new openssl</changelog>
</package>
<package pkgid="5cc6d13cbd74ab5f2bfe9cff685bd954ad6742a27528cce06f7698273cb84249" name="iproute-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.17.0" rel="2.el9"/>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-1" date="1734004800">- iproute-6.11.0-1.el9</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-2" date="1743422400">- Fix gating yaml</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-3" date="1743422401">- Add tmt test plan</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-4" date="1743422402">- Add image-mode testing</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-5" date="1743595200">- image-mode: double test duration</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.14.0-1" date="1748347200">- iproute-6.14.0-1.el9</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.14.0-2" date="1750593600">- iproute-6.14.0-2.el9</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.17.0-1" date="1761048000">- iproute-6.17.0-1.el9</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.17.0-2" date="1769515200">- iproute-6.17.0-2.el9</changelog>
</package>
<package pkgid="e3c5ead08558e28407208b4640ede37b68eb004d97fae68a01b048d64213b344" name="iproute-tc-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.17.0" rel="2.el9"/>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-1" date="1734004800">- iproute-6.11.0-1.el9</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-2" date="1743422400">- Fix gating yaml</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-3" date="1743422401">- Add tmt test plan</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-4" date="1743422402">- Add image-mode testing</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-5" date="1743595200">- image-mode: double test duration</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.14.0-1" date="1748347200">- iproute-6.14.0-1.el9</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.14.0-2" date="1750593600">- iproute-6.14.0-2.el9</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.17.0-1" date="1761048000">- iproute-6.17.0-1.el9</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.17.0-2" date="1769515200">- iproute-6.17.0-2.el9</changelog>
</package>
<package pkgid="06a67d13e88cf806c9a43e5ebf56805b7ebf0ff6bc915957c16b75f40145a7e6" name="iscsi-initiator-utils-debuginfo" arch="i686">
  <version epoch="0" ver="6.2.1.11" rel="1.git4b3e853.el9_8.2"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-0.git4b3e853" date="1746619200">- Open-iSCSI upstream 2.1.11</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-1.git4b3e853" date="1782388800">- fix regression in fw and static node records</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.1" date="1785412800">- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.2" date="1785412801">- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass</changelog>
</package>
<package pkgid="8d49216154098bb066de2549882612abca4f3b9df26b1b2f942a9bce94560c7c" name="iscsi-initiator-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.2.1.11" rel="1.git4b3e853.el9_8.2"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-0.git4b3e853" date="1746619200">- Open-iSCSI upstream 2.1.11</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-1.git4b3e853" date="1782388800">- fix regression in fw and static node records</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.1" date="1785412800">- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.2" date="1785412801">- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass</changelog>
</package>
<package pkgid="c189b44dee77b6a84eab3e485141d1914f95b20779ede5da3318eadfc64578a3" name="iscsi-initiator-utils-debugsource" arch="i686">
  <version epoch="0" ver="6.2.1.11" rel="1.git4b3e853.el9_8.2"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-0.git4b3e853" date="1746619200">- Open-iSCSI upstream 2.1.11</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-1.git4b3e853" date="1782388800">- fix regression in fw and static node records</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.1" date="1785412800">- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.2" date="1785412801">- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass</changelog>
</package>
<package pkgid="a7def114e7e3d2df7370dfbc9da36b46ac91cc7f3cdb965190dacebdd94282da" name="iscsi-initiator-utils-debugsource" arch="x86_64">
  <version epoch="0" ver="6.2.1.11" rel="1.git4b3e853.el9_8.2"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-0.git4b3e853" date="1746619200">- Open-iSCSI upstream 2.1.11</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-1.git4b3e853" date="1782388800">- fix regression in fw and static node records</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.1" date="1785412800">- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.2" date="1785412801">- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass</changelog>
</package>
<package pkgid="e936ad5c20a76693505b69035600228fc8c35492ad623464f2627ac23a043e12" name="iscsi-initiator-utils-iscsiuio-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.2.1.11" rel="1.git4b3e853.el9_8.2"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-0.git4b3e853" date="1746619200">- Open-iSCSI upstream 2.1.11</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-1.git4b3e853" date="1782388800">- fix regression in fw and static node records</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.1" date="1785412800">- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.2" date="1785412801">- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass</changelog>
</package>
<package pkgid="3995299370cbacd5c83870c56ab740b5f738ad85c27858ece0c9b9b69459a119" name="isns-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.101" rel="4.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.101-4.1" date="1785412800">- Fix CVE-2026-55995: prevent double-free in attrs.c error paths</changelog>
</package>
<package pkgid="c77afa62b4aeb9901b4149e6d950722afd6f96085593d16383a3ddc571a26b67" name="isns-utils-debugsource" arch="x86_64">
  <version epoch="0" ver="0.101" rel="4.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.101-4.1" date="1785412800">- Fix CVE-2026-55995: prevent double-free in attrs.c error paths</changelog>
</package>
<package pkgid="5c7d9fec8f680571617271dd121c19d7d40675c99b72f9badad058e84fb2275f" name="isns-utils-libs-debuginfo" arch="i686">
  <version epoch="0" ver="0.101" rel="4.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.101-4.1" date="1785412800">- Fix CVE-2026-55995: prevent double-free in attrs.c error paths</changelog>
</package>
<package pkgid="32e5201b04969868610af04824b0b987c12e45892d5b511a96ea16befe43d8fe" name="isns-utils-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.101" rel="4.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.101-4.1" date="1785412800">- Fix CVE-2026-55995: prevent double-free in attrs.c error paths</changelog>
</package>
<package pkgid="c27d9ecd0c9b3dcd4d7c34e12d3ba5c9d903356b8d1c11c79903ba456ea4fee7" name="iw-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.17" rel="1.el9"/>
  <changelog author="Jose Ignacio Tornos Martinez &lt;jtornosm@redhat.com&gt; - 6.7" date="1706184000">- Update to 6.7 from upstream
  Resolves: RHEL-22657</changelog>
  <changelog author="Jose Ignacio Tornos Martinez &lt;jtornosm@redhat.com&gt; - 6.9" date="1716292800">- Update to 6.9 from upstream
  Resolves: RHEL-37546</changelog>
  <changelog author="Jose Ignacio Tornos Martinez &lt;jtornosm@redhat.com&gt; - 6.17.1" date="1764158400">- Update to 6.17 from upstream
  Resolves: RHEL-127107</changelog>
</package>
<package pkgid="dc57b3618812181341f6a31ac9436493093bee13097a7219cdb3e543fee0a3b0" name="iw-debugsource" arch="x86_64">
  <version epoch="0" ver="6.17" rel="1.el9"/>
  <changelog author="Jose Ignacio Tornos Martinez &lt;jtornosm@redhat.com&gt; - 6.7" date="1706184000">- Update to 6.7 from upstream
  Resolves: RHEL-22657</changelog>
  <changelog author="Jose Ignacio Tornos Martinez &lt;jtornosm@redhat.com&gt; - 6.9" date="1716292800">- Update to 6.9 from upstream
  Resolves: RHEL-37546</changelog>
  <changelog author="Jose Ignacio Tornos Martinez &lt;jtornosm@redhat.com&gt; - 6.17.1" date="1764158400">- Update to 6.17 from upstream
  Resolves: RHEL-127107</changelog>
</package>
<package pkgid="52e3d08f01ee9dc387f31b345f9ab5feeaab7226548d00b3f2fec703fcac4c59" name="iwpmd-debuginfo" arch="x86_64">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="6c0f2e015ddfc963efdf9073a48f0469daa23e7f9a1412b24df56fb0f006b27d" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.12.1" date="1779969600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.12.1" date="1782993600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="d8eafadae79011ca8dbfd7c27777c716ecba1586280c863a1af6698bc5b6484a" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.15.1" date="1782993600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="2d2f26456334fdbf97a8ab2ad020996933b7710c23614e0455a5a63c9b073a0d" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.17.1" date="1782993600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="1e3c42c5d3a31f99a88de656193e8bef77ba69b4fdd854880341e6e840555332" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.24.1" date="1784030400">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="28f78e7ed43fa93964670fa26606ac7a73ced33340b5115667e7878fdd8bd24d" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.25.1" date="1784116800">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="7f4e0e88a600622e88d907c6f8c64bfb3c0cbbbf0b788fc25778566a3c8599c1" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944000">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.26.1" date="1784289600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="73dad01b81eb6d46d0659d40fc69faad1f86cbbe91f70c3b42767fb28a8e46a1" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.30.1" date="1785153600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.30.1" date="1785240000">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="c11be1eb5c636ddd9e93ab36ec12dd3a9358f803cc42a01cdd24ed65eab2c86d" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.31.1" date="1785240000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.31.1" date="1785499200">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="07262237aff1b527fd2fac3f66ab67e9388cee0dafca63491fe97ad8c6ec9d4c" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.33.1" date="1785499200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.33.1" date="1785844800">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="e117396130c8ba4be464390ac9090b633b80ca15520d59188eac883cf525e39e" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.34.1" date="1785844800">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.34.1" date="1786190400">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="e469b73636808b5a4206893cc7fe4e8c86914dc42f34fc6422c20b5d708b0e04" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.36.1" date="1786017600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.36.1" date="1786536000">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="e996be6771130e68002c52e2f8ca708106e995a367ec6e6a8a26853d57c33f55" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.39.1" date="1786622400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.39.1" date="1786881600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="aade89818308ed3a931c2a17316fd2d9f41354c3e03f6a9b14956b59c74c3f33" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.12.1" date="1779969600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.12.1" date="1782993600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="6ac52253a188c811bfb597335ecc9134eef586ece2876eb608cfec7b8ac2f5fa" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.15.1" date="1782993600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="c26f2edd18d48f4b1435f656f624149e9e98e6e7b4b0f29665933ddede6e9974" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.17.1" date="1782993600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="c96844831fa7d015cf0a96f10f5b43d97ec47cf15ae907c9d7636b80d3af141a" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.24.1" date="1784030400">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="7013f3ec49b127845521f4b6ef223fe2b5833e89e4672c89b538a8371f020d8f" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.25.1" date="1784116800">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="11b287b26c3f4a28ec6977df6a7e9881f7cbceac6020d518cffcb48e33009053" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944000">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.26.1" date="1784289600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="58e29a1e221c343ee1bb1425118b937c0a01b88c4446ca67bca0ee1781247648" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.30.1" date="1785153600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.30.1" date="1785240000">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="f64618a49ff14c90473c878874d340bf0071957775c05e33c94e80132e7fc686" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.31.1" date="1785240000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.31.1" date="1785499200">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="58103e503c7769382569fd9490e69644c7bb4a094c383897129cf64677f65f3b" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.33.1" date="1785499200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.33.1" date="1785844800">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="cde5f7ad8b0c52d814da0cc0c98a26e89f418646bb3e9813771ce17930947af0" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.34.1" date="1785844800">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.34.1" date="1786190400">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="14dee96cefedc7dba1bf3a9cc1820cd2cd148ecefa154bd78d226606beb8c62a" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.36.1" date="1786017600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.36.1" date="1786536000">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="6c2da636d311a35629e050366f29304ab25690b6d9e06247eb2ded77d9029da5" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.39.1" date="1786622400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.39.1" date="1786881600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="af352cfc86aff8319e4ed7116779b23f99bb3fabd6b877264856e143f3e0d0c9" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.12.1" date="1779969600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.12.1" date="1782993600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="f781e22776663afe8bc4ca9847bfe97f6a407520f781a9028fd292f94fcad214" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.15.1" date="1782993600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="5c2c825219b486491f56e476ec40dff365b9f70ccc555dce67ea34027ae09756" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.17.1" date="1782993600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="77d11862fdd9e52b94cc07ac4b5610535ffb004305059041558b7ea44497bdf3" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.24.1" date="1784030400">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="828d0897b33bdd633f8c2ab7c4f8989bfe2f6cb687bc045dbffe9801f4ff637a" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.25.1" date="1784116800">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="98df3e291d33161c6a7502c2f6607732a3f82beb372a94eec6d0b2778fb629dc" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944000">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.26.1" date="1784289600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="70ecb6cae60789537796cd7af1b1457fec0d3645407424e92a5d51cbbe218085" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.30.1" date="1785153600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.30.1" date="1785240000">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="45dd85a84fc26cf2e7b4e8fc55daffcd9c8e7c5748753139697fe609280f2404" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.31.1" date="1785240000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.31.1" date="1785499200">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="dce63c107cbbc8a86b136d60698c7c860a3fbcddd0765f9da5007e05cd651645" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.33.1" date="1785499200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.33.1" date="1785844800">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="af6065821c13d5233aeb3442f3a2e252bb97849ad4496f98be1a3704adda45cd" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.34.1" date="1785844800">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.34.1" date="1786190400">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="7b8196f8a78ea846b1fb17aaeaae9cbc51f96566201a47f3ddb810e2524d2690" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.36.1" date="1786017600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.36.1" date="1786536000">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="39fbec3d43386c1e37ecba4407d26172090ef53abd5db60e673c98718003b3b8" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.39.1" date="1786622400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.39.1" date="1786881600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="92043c6fc07a8092084a8477207d2ecf024185c0862eeb7889e3dc4da4b3e18e" name="kexec-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.29" rel="17.el9"/>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2.0.29-8" date="1749729600">- kdumpctl: check and generate /etc/vconsole.conf
- kdump-lib.sh: Reserve crashkernel by default for systems with 1G-2G memory</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2.0.29-9" date="1754049600">- Support dumping to NVMe/TCP configured using NVMe Boot Firmware Table</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2.0.29-10" date="1754568000">- sysconfig: disable kfence in kdump kernel</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2.0.29-11" date="1759492800">- kdumpctl: deprecate --reboot for reset-creashkernel</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2.0.29-12" date="1763121600">- Allow "sudo kdumpctl" for LUKS dump target
- Restore SELinux label of crypttab file
- Allow kdump.service to access LUKS volume keys
- Wait for LUKS configfs API to be ready
- Change LUKS volume key prefix to kdump-cryptsetup:vk-
- Remove unused LUKS volume keys from keyring
- Limit LUKS support to x86_64
- Add kdumpctl setup-crypttab subcommand
- Return LUKS devices in the form of UUIDs directly
- Fix SC2181 issues in kdump-udev-throttler
- LUKS: make /usr writable
- Address CPU/memory hot plugging for kdump LUKS support
- shfmt kdump-udev-throttler
- Use cryptsetup --link-vk-to-keyring to save volume keys
- Support dumping to a LUKS-encrypted target
- Add a helper function to get uuid by MAJ:MIN</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.29-13" date="1765454400">- update 98-kexec rules for crash hotplug</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.29-14" date="1766491200">- powerpc: Set nr_cpus=16 for kdump kernel
- powerpc: consider CPU count while calculating crashkernel value
- Use all available CPUs to collect dump</changelog>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 2.0.29-15" date="1768996800">- sysconfig: use initramfs_options to reduce memory usage
- kdump-lib-initramfs: rewrite kdump_get_conf_val
- kdump-lib-initramfs: Fix performance regression in kdump_get_conf_val</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2.0.29-16" date="1769083200">- kexec-kdump-howto.txt: update paragraphs related to disable_cpu_apicid</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.29-17" date="1770984000">- Fix a data race in multi-threading mode (--num-threads=N)</changelog>
</package>
<package pkgid="9d8044a183fd20fd5e9d8752571f916e3f020adc15c68df9d1172392cfae0133" name="kexec-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.29" rel="17.el9"/>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2.0.29-8" date="1749729600">- kdumpctl: check and generate /etc/vconsole.conf
- kdump-lib.sh: Reserve crashkernel by default for systems with 1G-2G memory</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2.0.29-9" date="1754049600">- Support dumping to NVMe/TCP configured using NVMe Boot Firmware Table</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2.0.29-10" date="1754568000">- sysconfig: disable kfence in kdump kernel</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2.0.29-11" date="1759492800">- kdumpctl: deprecate --reboot for reset-creashkernel</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2.0.29-12" date="1763121600">- Allow "sudo kdumpctl" for LUKS dump target
- Restore SELinux label of crypttab file
- Allow kdump.service to access LUKS volume keys
- Wait for LUKS configfs API to be ready
- Change LUKS volume key prefix to kdump-cryptsetup:vk-
- Remove unused LUKS volume keys from keyring
- Limit LUKS support to x86_64
- Add kdumpctl setup-crypttab subcommand
- Return LUKS devices in the form of UUIDs directly
- Fix SC2181 issues in kdump-udev-throttler
- LUKS: make /usr writable
- Address CPU/memory hot plugging for kdump LUKS support
- shfmt kdump-udev-throttler
- Use cryptsetup --link-vk-to-keyring to save volume keys
- Support dumping to a LUKS-encrypted target
- Add a helper function to get uuid by MAJ:MIN</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.29-13" date="1765454400">- update 98-kexec rules for crash hotplug</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.29-14" date="1766491200">- powerpc: Set nr_cpus=16 for kdump kernel
- powerpc: consider CPU count while calculating crashkernel value
- Use all available CPUs to collect dump</changelog>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 2.0.29-15" date="1768996800">- sysconfig: use initramfs_options to reduce memory usage
- kdump-lib-initramfs: rewrite kdump_get_conf_val
- kdump-lib-initramfs: Fix performance regression in kdump_get_conf_val</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2.0.29-16" date="1769083200">- kexec-kdump-howto.txt: update paragraphs related to disable_cpu_apicid</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.29-17" date="1770984000">- Fix a data race in multi-threading mode (--num-threads=N)</changelog>
</package>
<package pkgid="fcfc2b575c0df629d05ae5c3c06d4c22b69f6b1f45c315adf9697c73ff8543c9" name="kmod-kvdo-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.2.7.4" rel="189.el9_8"/>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.5.10-181.el9" date="1763467200">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.5.10-182.el9" date="1764590400">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.5.10-183.el9" date="1765195200">- TEMPORARY FIX to correct build failures regarding from_timer error
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.5.10-184.el9" date="1765368000">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.5.10-185.el9" date="1766404800">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.7.3-186.el9" date="1767960000">- Replace from_timer with timer_container_of
- Resolves: RHEL-140206</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.7.3-187.el9" date="1767960001">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.7.4-187.el9" date="1770379200">- Remove us_to_ktime definition to resolve kernel conflicts.
- Resolves: RHEL-146745</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.7.3-188.el9" date="1771848000">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.7.3-189.el9" date="1773921600">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
</package>
<package pkgid="7c5763dd6ec0b2c2fb8e8d8010dbd4b1ff5267bd7f01ba8a1c6ffe4fb4c2f1fc" name="kmod-kvdo-debugsource" arch="x86_64">
  <version epoch="0" ver="8.2.7.4" rel="189.el9_8"/>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.5.10-181.el9" date="1763467200">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.5.10-182.el9" date="1764590400">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.5.10-183.el9" date="1765195200">- TEMPORARY FIX to correct build failures regarding from_timer error
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.5.10-184.el9" date="1765368000">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.5.10-185.el9" date="1766404800">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.7.3-186.el9" date="1767960000">- Replace from_timer with timer_container_of
- Resolves: RHEL-140206</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.7.3-187.el9" date="1767960001">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.7.4-187.el9" date="1770379200">- Remove us_to_ktime definition to resolve kernel conflicts.
- Resolves: RHEL-146745</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.7.3-188.el9" date="1771848000">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
  <changelog author="- Chung Chung &lt;cchung@redhat.com&gt; - 8.2.7.3-189.el9" date="1773921600">- Rebuilt for latest kernel.
- Resolves: RHEL-112497</changelog>
</package>
<package pkgid="1bbf941b82821976502fcacc93519972cbd01d5e57bc9dd93203fc78cf341326" name="kpartx-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.7" rel="45.el9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-36" date="1741089600">- Add 0128-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
- Add 0129-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
- Add 0130-libmpathutil-add-support-for-Unix-pathname-sockets.patch
- Add 0131-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
- Add 0132-multipathd-move-uxsock_trigger-to-uxlsnr.c.patch
- Add 0133-multipathd-uxlsnr-use-symbolic-values-for-pollfd-ind.patch
- Add 0134-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
- Add 0135-multipathd-allow-receiving-two-socket-fds-from-syste.patch
- Add 0136-multipathd-listen-on-pathname-and-abstract-socket-by.patch
- Add 0137-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
- Add 0138-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
- Add 0139-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
  * Fixes RHEL-78758 ("RFE: Enable multipathd to communicate with a
    process in another network namespace")
- Resolves: RHEL-78758</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-37" date="1741867200">- Add 0140-multipath-clean-up-find_multipaths-value-names.patch
- Add 0141-multipathd-Add-multipathd-man-page-section-about-soc.patch
  * Fixes RHEL-82307 ("There is no man page for RFE: Enable multipathd
    to communicate with a process in another network namespace")
- Fix multipath_conf_syntax OSCI test.
- Resolves: RHEL-82307</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-38" date="1744891200">- Add 0142-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
- Add 0143-libmultipath-add-helper-function-check_path_wwid_cha.patch
- Add 0144-multipathd-re-add-paths-skipped-because-they-were-of.patch
  * Fixes RHEL-82534 ("multipathd does not monitor multipath devices
    created externally while there are offline paths.")
- Resolves: RHEL-82534</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-39" date="1752494400">- Add 0145-multipath-tools-add-DellEMC-ME4-PowerVault-ME4-to-ha.patch
- Add 0146-multipath-tools-add-HPE-as-vendor-for-OPEN-XP8-array.patch
- Add 0147-multipath-tools-add-HP-HSVX740-to-hwtable.patch
- Add 0148-multipath-tools-add-DellEMC-ME5-PowerVault-ME5-to-ha.patch
- Add 0149-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
  * Fixes RHEL-103109 ("Update multipath builtin config to add new
    device defaults")
- Resolves: RHEL-103109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-40" date="1759320000">- Add 0150-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
- Add 0151-libmpathpersist-check-released-key-against-the-reser.patch
- Add 0152-multipathd-remove-thread-from-mpath_pr_event_handle.patch
- Add 0153-libmpathpersist-remove-uneeded-wrapper-function.patch
- Add 0154-libmpathpersist-reduce-log-level-for-persistent-rese.patch
- Add 0155-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
- Add 0156-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
- Add 0157-libmpathpersist-limit-changing-prflag-in-update_map_.patch
- Add 0158-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
- Add 0159-libmpathpersist-remove-useless-function-send_prout_a.patch
- Add 0160-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
- Add 0161-limpathpersist-redesign-failed-release-workaround.patch
- Add 0162-libmpathpersist-fail-the-release-if-all-threads-fail.patch
- Add 0163-limpathpersist-Handle-changing-key-corner-case.patch
- Add 0164-libmpathpersist-fix-command-keyword-ordering.patch
- Add 0165-libmpathpersist-use-conf-timeout-for-updating-persis.patch
- Add 0166-libmapthpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
- Add 0167-libmultipath-rename-prflag_value-enums.patch
- Add 0168-libmpathpersist-use-a-switch-statement-for-prout-com.patch
- Add 0169-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
- Add 0170-limpathpersist-remove-update_map_pr-code-for-NULL-pp.patch
- Add 0171-libmpathpersist-move-update_map_pr-to-multipathd.patch
- Add 0172-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
- Add 0173-libmpathpersist-clean-up-duplicate-function-declarat.patch
- Add 0174-multipathd-wrap-setting-and-unsetting-prflag.patch
- Add 0175-multipathd-unregister-PR-key-when-path-is-restored-i.patch
- Add 0176-libmpathpersist-Fix-up-reservation_key-checking.patch
- Add 0177-libmpathpersist-change-how-reservation-conflicts-are.patch
- Add 0178-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
- Add 0179-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
- Add 0180-libmpathpersist-Restore-old-reservation-key-on-failu.patch
- Add 0181-libmpatpersist-update-reservation-key-before-checkin.patch
- Add 0182-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
- Add 0183-libmpathpersist-Don-t-always-fail-registrations-for-.patch
- Add 0184-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
- Add 0185-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
- Add 0186-libmpathpersist-reregister-keys-when-self-preempting.patch
- Add 0187-libmpathpersist-handle-updating-key-race-condition.patch
- Add 0188-libmpathpersist-handle-preempting-all-registrants-re.patch
- Add 0189-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
- Add 0190-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
- Add 0191-libmpathpersist-use-check_holding_reservation-in-mpa.patch
- Add 0192-libmpathpersist-Fix-unregistering-while-holding-the-.patch
- Add 0193-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
- Add 0194-multipathd-Fix-tracking-of-old-PR-key.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-41" date="1762862400">- Add 0195-multipathd-Fix-race-while-registering-PR-key.patch
- Add 0196-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-42" date="1763553600">- Add 0197-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
  * Fixes RHEL-128396 ("Update the multipath.conf stanza for Infinidat
    storage [rhel-9]")
- Resolves: RHEL-128396</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-43" date="1769083200">- Add 0198-multipathd-print-path-offline-message-even-without-a.patch
  * Fixes RHEL-133814 ("log_checker_err is not printing messages
    repeatedly for failed path [rhel-9]")
- Add 0199-libmultipath-improve-cleanup-of-uevent-queues-on-exi.patch
- Add 0200-uevent_dispatch-use-while-in-wait-loop.patch
- Add 0201-libmultipath-uevent_dispatch-process-uevents-one-by-.patch
- Add 0202-libmultipath-uevent_listen-don-t-delay-uevents.patch
- Add 0203-libmultipath-uevent-use-struct-to-pass-parameters-ar.patch
- Add 0204-libmultipath-is_uevent_busy-check-servicing_uev-unde.patch
- Add 0205-multipathd-make-multipathd-show-status-busy-checker-.patch
  * Fixes RHEL-135904 (VM reboot in RHOSP environment fails with error
    "Could not open '/dev/dm-95': No such file or directory")
- Resolves: RHEL-133814
- Resolves: RHEL-135904</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-44" date="1769688000">- Add 0206-libmultipath-add-purge_disconnected-configuration-op.patch
- Add 0207-multipathd-implement-purge-functionality-for-disconn.patch
  * Fixes RHEL-141291 ("Add purge_disconnected support to multipathd
    [rhel-9]")
- Resolves: RHEL-141291</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-45" date="1771502400">- Add 0208-libmpathpersist-fix-register-retry-status-checking.patch
- Add 0209-multipathd-remember-number-of-registered-keys-when-i.patch
- Add 0210-libmpathpersist-fix-code-for-skipping-multipathd-pat.patch
  * Fixes RHEL-148462 ("Improve multipathd's handling of updating
    persistent reservations on restored paths. [rhel-9]")
- Resolves: RHEL-148462</changelog>
</package>
<package pkgid="41599b4f9d0e56773cf9f2b0a4f7dbc0b297b42c68724d6687c312abb17fbbfc" name="krb5-libs-debuginfo" arch="i686">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="831a043a93dcec55fba5c01578c1c0b95375258fd000299a288c3af903465b04" name="krb5-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="92ec1542a0a2b607b61e9860f51e6e975afa399948d1bb163f64d932726bf665" name="krb5-pkinit-debuginfo" arch="i686">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="ad89659ff2fde108c5cccbafa388f24624c283b952900da143fda78da438ff8d" name="krb5-pkinit-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="a2fb9ef399089ff4892ff1a0ec70994a50b55f3589db550bee3ad63892fd89ff" name="krb5-server-debuginfo" arch="i686">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="c0576bc8e49d9accb471fc33fb712eaa7642a47a734e17a1138c00bd6b55d392" name="krb5-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="d9b02a21659c9fda71681861408ae8762f8e933ad30be68f2bfb48b2b4c2f1b1" name="krb5-server-ldap-debuginfo" arch="i686">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="725555b8b1587389d80eb44dc7d52e09129870cda5dd801619aefb8eac0206d0" name="krb5-server-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="16e43bbb05963404e16113e3bc8a767eac1f1bbac9b96ace67877bfa6edf372b" name="krb5-workstation-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="8f82bfcffb5f903e56031cdcd1169c449e77b8a6ddf895b8306f95a9653512eb" name="ldb-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="0ae8e6c4fdca2fdd0333141a9ec0b822d3d19ec8da0164980edd9c0d1983fbf8" name="ldns-debuginfo" arch="i686">
  <version epoch="0" ver="1.7.1" rel="12.el9_8.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.7.1-12" date="1733227200">- Fix digest calculation of sha256 (RHEL-20391)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.7.1-12.1" date="1784289600">- Fix CVE-2026-10846: DNS response spoofing via missing
  address/port/TXID and question section validation (RHEL-210701)</changelog>
</package>
<package pkgid="0a840105b62f1a0bdb7451efe9300c07a5ba4f2f67ae61cfaf418dac0e5c9663" name="ldns-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="12.el9_8.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.7.1-12" date="1733227200">- Fix digest calculation of sha256 (RHEL-20391)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.7.1-12.1" date="1784289600">- Fix CVE-2026-10846: DNS response spoofing via missing
  address/port/TXID and question section validation (RHEL-210701)</changelog>
</package>
<package pkgid="928e9129b21d47b7dbfefcdc5fa636831ba3634e3a3b097f7620d88c6793ce5f" name="ldns-debugsource" arch="i686">
  <version epoch="0" ver="1.7.1" rel="12.el9_8.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.7.1-12" date="1733227200">- Fix digest calculation of sha256 (RHEL-20391)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.7.1-12.1" date="1784289600">- Fix CVE-2026-10846: DNS response spoofing via missing
  address/port/TXID and question section validation (RHEL-210701)</changelog>
</package>
<package pkgid="fdcacfdbda84edb687d68c48bc06d7d9fea0a3558fbdfb50d934f944f816e0eb" name="ldns-debugsource" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="12.el9_8.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.7.1-12" date="1733227200">- Fix digest calculation of sha256 (RHEL-20391)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.7.1-12.1" date="1784289600">- Fix CVE-2026-10846: DNS response spoofing via missing
  address/port/TXID and question section validation (RHEL-210701)</changelog>
</package>
<package pkgid="fc2ed766e830a89936d913cd0c93ae5865b0cd0abed1d2e6e8de56f43b97346d" name="ldns-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="12.el9_8.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.7.1-12" date="1733227200">- Fix digest calculation of sha256 (RHEL-20391)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.7.1-12.1" date="1784289600">- Fix CVE-2026-10846: DNS response spoofing via missing
  address/port/TXID and question section validation (RHEL-210701)</changelog>
</package>
<package pkgid="50a3fb776404e54307a61543a51a1ed7d79ed865d4c928ec5f5dc974bbeeb1be" name="libXfont2-debuginfo" arch="i686">
  <version epoch="0" ver="2.0.3" rel="12.el9_8.1"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 2.0.3-12.1" date="1783512000">- CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003
  Resolves: https://redhat.atlassian.net/browse/RHEL-191886
  Resolves: https://redhat.atlassian.net/browse/RHEL-191933
  Resolves: https://redhat.atlassian.net/browse/RHEL-191938</changelog>
</package>
<package pkgid="69fd52f39019ac949ef1758a1a2aac4b6d1e75e13a0c2060b84869c181d96c7b" name="libXfont2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.3" rel="12.el9_8.1"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 2.0.3-12.1" date="1783512000">- CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003
  Resolves: https://redhat.atlassian.net/browse/RHEL-191886
  Resolves: https://redhat.atlassian.net/browse/RHEL-191933
  Resolves: https://redhat.atlassian.net/browse/RHEL-191938</changelog>
</package>
<package pkgid="50d2a3dcd4ae5b9f1bda68aacab8c366a5c59d7b9f24c9e7de1d7357308f3ce3" name="libXfont2-debuginfo" arch="i686">
  <version epoch="0" ver="2.0.3" rel="12.el9_8.3"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 2.0.3-12.1" date="1783512000">- CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003
  Resolves: https://redhat.atlassian.net/browse/RHEL-191886
  Resolves: https://redhat.atlassian.net/browse/RHEL-191933
  Resolves: https://redhat.atlassian.net/browse/RHEL-191938</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.0.3-12.2" date="1786017600">- CVE fix for: CVE-2026-44950
  Resolves: https://redhat.atlassian.net/browse/RHEL-222029</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.0.3-12.3" date="1786017601">- CVE fix for: CVE-2026-59679
  Resolves: https://redhat.atlassian.net/browse/RHEL-221957</changelog>
</package>
<package pkgid="bc39859bce5ade1b7862ad1d7a86b2898389a4cb41513ce16a6ddce68aa52637" name="libXfont2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.3" rel="12.el9_8.3"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 2.0.3-12.1" date="1783512000">- CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003
  Resolves: https://redhat.atlassian.net/browse/RHEL-191886
  Resolves: https://redhat.atlassian.net/browse/RHEL-191933
  Resolves: https://redhat.atlassian.net/browse/RHEL-191938</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.0.3-12.2" date="1786017600">- CVE fix for: CVE-2026-44950
  Resolves: https://redhat.atlassian.net/browse/RHEL-222029</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.0.3-12.3" date="1786017601">- CVE fix for: CVE-2026-59679
  Resolves: https://redhat.atlassian.net/browse/RHEL-221957</changelog>
</package>
<package pkgid="2f763e2c32bb25185ee66b61cfda2f4ea3aae568440b9df0155fb4c52db3207f" name="libXfont2-debugsource" arch="i686">
  <version epoch="0" ver="2.0.3" rel="12.el9_8.1"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 2.0.3-12.1" date="1783512000">- CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003
  Resolves: https://redhat.atlassian.net/browse/RHEL-191886
  Resolves: https://redhat.atlassian.net/browse/RHEL-191933
  Resolves: https://redhat.atlassian.net/browse/RHEL-191938</changelog>
</package>
<package pkgid="e76cba58c69b746bfa0bc0939aa792ba7430fb751153fff3476331988db4bfe2" name="libXfont2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.3" rel="12.el9_8.1"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 2.0.3-12.1" date="1783512000">- CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003
  Resolves: https://redhat.atlassian.net/browse/RHEL-191886
  Resolves: https://redhat.atlassian.net/browse/RHEL-191933
  Resolves: https://redhat.atlassian.net/browse/RHEL-191938</changelog>
</package>
<package pkgid="f03edaf31aa1af42c1c8ad8750aac2a5c5572212c97f83b1aaac0658b2f4b4ee" name="libXfont2-debugsource" arch="i686">
  <version epoch="0" ver="2.0.3" rel="12.el9_8.3"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 2.0.3-12.1" date="1783512000">- CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003
  Resolves: https://redhat.atlassian.net/browse/RHEL-191886
  Resolves: https://redhat.atlassian.net/browse/RHEL-191933
  Resolves: https://redhat.atlassian.net/browse/RHEL-191938</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.0.3-12.2" date="1786017600">- CVE fix for: CVE-2026-44950
  Resolves: https://redhat.atlassian.net/browse/RHEL-222029</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.0.3-12.3" date="1786017601">- CVE fix for: CVE-2026-59679
  Resolves: https://redhat.atlassian.net/browse/RHEL-221957</changelog>
</package>
<package pkgid="361fbc559434fee55c65796c9a7c1caca67c8b8f407733441956d1d19daf1f78" name="libXfont2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.3" rel="12.el9_8.3"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 2.0.3-12.1" date="1783512000">- CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003
  Resolves: https://redhat.atlassian.net/browse/RHEL-191886
  Resolves: https://redhat.atlassian.net/browse/RHEL-191933
  Resolves: https://redhat.atlassian.net/browse/RHEL-191938</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.0.3-12.2" date="1786017600">- CVE fix for: CVE-2026-44950
  Resolves: https://redhat.atlassian.net/browse/RHEL-222029</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.0.3-12.3" date="1786017601">- CVE fix for: CVE-2026-59679
  Resolves: https://redhat.atlassian.net/browse/RHEL-221957</changelog>
</package>
<package pkgid="379fd2c20dc8ac9034673fe295999de6899c34deec53130abb9808a71b2c94df" name="libXrender-debuginfo" arch="i686">
  <version epoch="0" ver="0.9.10" rel="16.el9_8.1"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 0.9.10-16.1" date="1782734400">- Fix build with newer libX11
  Resolves: https://redhat.atlassian.net/browse/RHEL-191382</changelog>
</package>
<package pkgid="6cfd8861dddafcb304d3d63b28568e632c5841b5f8a89a0b94ee11fed4b5491f" name="libXrender-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.10" rel="16.el9_8.1"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 0.9.10-16.1" date="1782734400">- Fix build with newer libX11
  Resolves: https://redhat.atlassian.net/browse/RHEL-191382</changelog>
</package>
<package pkgid="db6659e1854a1974931ac361daf6f5a6b6748e241e4453a172129038213eb140" name="libXrender-debugsource" arch="i686">
  <version epoch="0" ver="0.9.10" rel="16.el9_8.1"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 0.9.10-16.1" date="1782734400">- Fix build with newer libX11
  Resolves: https://redhat.atlassian.net/browse/RHEL-191382</changelog>
</package>
<package pkgid="76f876f7a47b6de0cf0a9a8d4a45da3298e903d425a89ac1f2b6cbcb59b21828" name="libXrender-debugsource" arch="x86_64">
  <version epoch="0" ver="0.9.10" rel="16.el9_8.1"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 0.9.10-16.1" date="1782734400">- Fix build with newer libX11
  Resolves: https://redhat.atlassian.net/browse/RHEL-191382</changelog>
</package>
<package pkgid="bcc2140bb46a605a402fc5988011a5f7c59afcc25a3e8fe9b43985c8f1c65df9" name="libacl-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.0" rel="1.el9_8"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.4.0-1" date="1782388800">- rebase to 2.4.0 to fix the following CVEs:
  - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions (RHEL-186111)
  - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl (RHEL-186216)</changelog>
</package>
<package pkgid="46a292599171f023e566adfdb83d4e2f4f22612661e0f7d55b3a1f35aad83646" name="libacl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="1.el9_8"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.4.0-1" date="1782388800">- rebase to 2.4.0 to fix the following CVEs:
  - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions (RHEL-186111)
  - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl (RHEL-186216)</changelog>
</package>
<package pkgid="4bb88af70b7735527ff646e78efb4f7c7aa4ee66db3ea71539dabaf02097b9f1" name="libarchive-debuginfo" arch="i686">
  <version epoch="0" ver="3.5.3" rel="11.el9_8"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-5" date="1749124800">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-6" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-7" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-8" date="1774353600">- Release bump</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-9" date="1775736000">- Resolves: CVE-2026-4424
- Resolves: CVE-2026-5121</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-10" date="1782820800">- Resolves: CVE-2026-14164</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-11" date="1784203200">- Related: CVE-2026-14164</changelog>
</package>
<package pkgid="9bbf22399427b44e5f32a89460615933883896f1346559b405615b6944b28dc7" name="libarchive-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.5.3" rel="11.el9_8"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-5" date="1749124800">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-6" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-7" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-8" date="1774353600">- Release bump</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-9" date="1775736000">- Resolves: CVE-2026-4424
- Resolves: CVE-2026-5121</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-10" date="1782820800">- Resolves: CVE-2026-14164</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-11" date="1784203200">- Related: CVE-2026-14164</changelog>
</package>
<package pkgid="57a4ac1d12009b5a1659383d4643d15a116e8bcc04e2faaefab67dfd8007a3f7" name="libarchive-debugsource" arch="i686">
  <version epoch="0" ver="3.5.3" rel="11.el9_8"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-5" date="1749124800">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-6" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-7" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-8" date="1774353600">- Release bump</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-9" date="1775736000">- Resolves: CVE-2026-4424
- Resolves: CVE-2026-5121</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-10" date="1782820800">- Resolves: CVE-2026-14164</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-11" date="1784203200">- Related: CVE-2026-14164</changelog>
</package>
<package pkgid="f78352f0e84cc31175ef2b7fa2b51ef1caddee21cd51a482c852e41b054681d3" name="libarchive-debugsource" arch="x86_64">
  <version epoch="0" ver="3.5.3" rel="11.el9_8"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-5" date="1749124800">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-6" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-7" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-8" date="1774353600">- Release bump</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-9" date="1775736000">- Resolves: CVE-2026-4424
- Resolves: CVE-2026-5121</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-10" date="1782820800">- Resolves: CVE-2026-14164</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-11" date="1784203200">- Related: CVE-2026-14164</changelog>
</package>
<package pkgid="c1f4b7d0f0059e6d1b969a414ba5d6212caa2c63dc83a8562677517f57cf3eff" name="libasan8-debuginfo" arch="i686">
  <version epoch="0" ver="14.2.1" rel="13.el9"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.2.1-1.1" date="1723550400">- do not hide _ZSt21ios_base_library_initv</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.2.1-1.2" date="1724328000">- bump NVR (RHEL-53492)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.2.1-7" date="1737547200">- update from releases/gcc-14 branch (RHEL-74061)
  - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
	c++/118069, driver/117942, fortran/84674, fortran/84869,
	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
	libstdc++/109517, libstdc++/109976, libstdc++/112349,
	libstdc++/112641, libstdc++/117520, libstdc++/117560,
	libstdc++/117822, libstdc++/117962, libstdc++/117966,
	libstdc++/118035, libstdc++/118093, middle-end/43374,
	middle-end/102674, middle-end/116997, middle-end/117433,
	middle-end/117458, middle-end/117459, middle-end/117847,
	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
	modula2/117660, modula2/117904, modula2/117948, other/116603,
	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
	rtl-optimization/117095, sanitizer/117960, target/64242,
	target/114801, target/114942, target/116371, target/116629,
	target/116999, target/117045, target/117105, target/117304,
	target/117357, target/117408, target/117418, target/117443,
	target/117500, target/117525, target/117562, target/117564,
	target/117642, target/117659, target/117675, target/117744,
	target/117926, testsuite/103298, testsuite/109360,
	tree-optimization/94589, tree-optimization/112376,
	tree-optimization/116463, tree-optimization/117142,
	tree-optimization/117254, tree-optimization/117307,
	tree-optimization/117333, tree-optimization/117398,
	tree-optimization/117417, tree-optimization/117439,
	tree-optimization/117574, tree-optimization/117594,
	tree-optimization/117612, tree-optimization/117912
- fix up -freport-bug default (#2330362, RHEL-70192)
- revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
  aarch64 to match upstream (RHEL-74059)
- consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)
- have gfortran require install-info (RHEL-62417)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.2.1-7.1" date="1738929600">- disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-8" date="1747915200">- libstdc++: Fix -Warray-bounds warning in std::vector&lt;bool&gt; (RHEL-90244)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-9" date="1747915201">- Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
  (RHEL-84679)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-10" date="1748433600">- Put the libstdc++ AS_NEEDED in the right places (RHEL-84679)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-11" date="1756296000">- Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-12" date="1756987200">- Fix glibc32 dependency (RHEL-112209)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-13" date="1767873600">- Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589)</changelog>
</package>
<package pkgid="ba7d3c7ef831f43b577ce22af58569a341a31279d79d836fc8f3d9bcbc56038e" name="libasan8-debuginfo" arch="x86_64">
  <version epoch="0" ver="14.2.1" rel="13.el9"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.2.1-1.1" date="1723550400">- do not hide _ZSt21ios_base_library_initv</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.2.1-1.2" date="1724328000">- bump NVR (RHEL-53492)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.2.1-7" date="1737547200">- update from releases/gcc-14 branch (RHEL-74061)
  - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
	c++/118069, driver/117942, fortran/84674, fortran/84869,
	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
	libstdc++/109517, libstdc++/109976, libstdc++/112349,
	libstdc++/112641, libstdc++/117520, libstdc++/117560,
	libstdc++/117822, libstdc++/117962, libstdc++/117966,
	libstdc++/118035, libstdc++/118093, middle-end/43374,
	middle-end/102674, middle-end/116997, middle-end/117433,
	middle-end/117458, middle-end/117459, middle-end/117847,
	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
	modula2/117660, modula2/117904, modula2/117948, other/116603,
	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
	rtl-optimization/117095, sanitizer/117960, target/64242,
	target/114801, target/114942, target/116371, target/116629,
	target/116999, target/117045, target/117105, target/117304,
	target/117357, target/117408, target/117418, target/117443,
	target/117500, target/117525, target/117562, target/117564,
	target/117642, target/117659, target/117675, target/117744,
	target/117926, testsuite/103298, testsuite/109360,
	tree-optimization/94589, tree-optimization/112376,
	tree-optimization/116463, tree-optimization/117142,
	tree-optimization/117254, tree-optimization/117307,
	tree-optimization/117333, tree-optimization/117398,
	tree-optimization/117417, tree-optimization/117439,
	tree-optimization/117574, tree-optimization/117594,
	tree-optimization/117612, tree-optimization/117912
- fix up -freport-bug default (#2330362, RHEL-70192)
- revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
  aarch64 to match upstream (RHEL-74059)
- consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)
- have gfortran require install-info (RHEL-62417)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.2.1-7.1" date="1738929600">- disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-8" date="1747915200">- libstdc++: Fix -Warray-bounds warning in std::vector&lt;bool&gt; (RHEL-90244)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-9" date="1747915201">- Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
  (RHEL-84679)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-10" date="1748433600">- Put the libstdc++ AS_NEEDED in the right places (RHEL-84679)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-11" date="1756296000">- Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-12" date="1756987200">- Fix glibc32 dependency (RHEL-112209)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-13" date="1767873600">- Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589)</changelog>
</package>
<package pkgid="a92649672ff77fb9a155cf5fbcbfbb3547d666df020de444e52bf1f6660ea7d0" name="libblkid-debuginfo" arch="i686">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="223e3dd63c34356e4c514cc3369197dc39c17ff50ea627c76904e21b2bc3c583" name="libblkid-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="c9d8028ad482e8ff6839f9b09332a0fc7f893cf5b7e26e7cf2c470ad7fae2d6a" name="libbpf-debuginfo" arch="i686">
  <version epoch="2" ver="1.5.0" rel="3.el9"/>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.3.0-1" date="1705406400">- Update to BPF 6.6 rebase (RHEL-10695)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.3.0-2" date="1707307200">- Fix bug in bpf_xdp_query causing stack corruption (RHEL-26037)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.4.0-1" date="1720699200">- Update to BPF 6.8 rebase (RHEL-30776)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-1" date="1738152000">- Update to BPF 6.12 rebase (RHEL-30778)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-2" date="1752062400">- Update to BPF 6.14 stable backport (RHEL-99685)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-3" date="1764936000">- Update to BPF 6.17 stable backport (RHEL-118560)</changelog>
</package>
<package pkgid="5a8feb4e579b4eb866a265537a6b1fd50c9b02c5345f951e92c96da15640d626" name="libbpf-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.5.0" rel="3.el9"/>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.3.0-1" date="1705406400">- Update to BPF 6.6 rebase (RHEL-10695)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.3.0-2" date="1707307200">- Fix bug in bpf_xdp_query causing stack corruption (RHEL-26037)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.4.0-1" date="1720699200">- Update to BPF 6.8 rebase (RHEL-30776)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-1" date="1738152000">- Update to BPF 6.12 rebase (RHEL-30778)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-2" date="1752062400">- Update to BPF 6.14 stable backport (RHEL-99685)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-3" date="1764936000">- Update to BPF 6.17 stable backport (RHEL-118560)</changelog>
</package>
<package pkgid="f41ca57cbc87fe853f8f7ef21920656a2307e19b72e4fabb31029fce46d4a22c" name="libcap-debuginfo" arch="i686">
  <version epoch="0" ver="2.48" rel="10.el9_7.1"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.48-10" date="1751544000">- Fix typos in the cap_from_text.3 man page
  Resolves: RHEL-1838</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.48-10.1" date="1776772800">- Fix TOCTOU race condition in cap_set_file() (CVE-2026-4878)
  Resolves: RHEL-169311</changelog>
</package>
<package pkgid="132f0550811b1060c7f7ba92f5fb05c606ecae8ea6822324471c69ddf3b71582" name="libcap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.48" rel="10.el9_7.1"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.48-10" date="1751544000">- Fix typos in the cap_from_text.3 man page
  Resolves: RHEL-1838</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.48-10.1" date="1776772800">- Fix TOCTOU race condition in cap_set_file() (CVE-2026-4878)
  Resolves: RHEL-169311</changelog>
</package>
<package pkgid="c745ba12b251e5c9ce7967761b14cbdd8997c2809cdc64dd78df95a380784638" name="libcap-debugsource" arch="i686">
  <version epoch="0" ver="2.48" rel="10.el9_7.1"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.48-10" date="1751544000">- Fix typos in the cap_from_text.3 man page
  Resolves: RHEL-1838</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.48-10.1" date="1776772800">- Fix TOCTOU race condition in cap_set_file() (CVE-2026-4878)
  Resolves: RHEL-169311</changelog>
</package>
<package pkgid="15fd65f104f452cc4b1b6112b59ba831dfe159f071bebb5cb94af5bc5b3ddb28" name="libcap-debugsource" arch="x86_64">
  <version epoch="0" ver="2.48" rel="10.el9_7.1"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.48-10" date="1751544000">- Fix typos in the cap_from_text.3 man page
  Resolves: RHEL-1838</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.48-10.1" date="1776772800">- Fix TOCTOU race condition in cap_set_file() (CVE-2026-4878)
  Resolves: RHEL-169311</changelog>
</package>
<package pkgid="f9b6c7630189e1b273c71b50bb33f640a413a98da4076219df2d82f11e9ba440" name="libcurl-debuginfo" arch="i686">
  <version epoch="0" ver="7.76.1" rel="40.el9"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-31" date="1724328000">- provide common cleanup method for push headers (CVE-2024-2398)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-32" date="1734436800">- make up incomplete patch for host name wildcard checking (RHEL-5675)
- eliminate use of obsolete patch syntax (RHEL-65791)
- http2: make sure pause is done on HTTP (RHEL-85847)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-33" date="1747310400">- noproxy: support proxies specified using cidr notation (RHEL-81412)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-34" date="1753272000">- revert several disabled tests related to openssl/valgrind (RHEL-99465)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-35" date="1761220800">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121659</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-36" date="1763640000">- rebuild for c9s (RHEL-125838)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-37" date="1764244800">- openssl: respect system crypto policy for TLS max version (RHEL-128914)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-38" date="1764590400">- http: fix crash in rate-limited upload (RHEL-131696)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-39" date="1766059200">- openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40" date="1768996800">- openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721)</changelog>
</package>
<package pkgid="bb316d1277ace66aab69fbee4128ebd4be64a842ee9eea13e1ac8ca07ab170b1" name="libcurl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.76.1" rel="40.el9"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-31" date="1724328000">- provide common cleanup method for push headers (CVE-2024-2398)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-32" date="1734436800">- make up incomplete patch for host name wildcard checking (RHEL-5675)
- eliminate use of obsolete patch syntax (RHEL-65791)
- http2: make sure pause is done on HTTP (RHEL-85847)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-33" date="1747310400">- noproxy: support proxies specified using cidr notation (RHEL-81412)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-34" date="1753272000">- revert several disabled tests related to openssl/valgrind (RHEL-99465)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-35" date="1761220800">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121659</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-36" date="1763640000">- rebuild for c9s (RHEL-125838)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-37" date="1764244800">- openssl: respect system crypto policy for TLS max version (RHEL-128914)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-38" date="1764590400">- http: fix crash in rate-limited upload (RHEL-131696)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-39" date="1766059200">- openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40" date="1768996800">- openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721)</changelog>
</package>
<package pkgid="71bbdbf208d84e44158d49ec499a7f7b8f626eabc39ad3ec690d5c34ce9b5532" name="libcurl-minimal-debuginfo" arch="i686">
  <version epoch="0" ver="7.76.1" rel="40.el9"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-31" date="1724328000">- provide common cleanup method for push headers (CVE-2024-2398)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-32" date="1734436800">- make up incomplete patch for host name wildcard checking (RHEL-5675)
- eliminate use of obsolete patch syntax (RHEL-65791)
- http2: make sure pause is done on HTTP (RHEL-85847)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-33" date="1747310400">- noproxy: support proxies specified using cidr notation (RHEL-81412)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-34" date="1753272000">- revert several disabled tests related to openssl/valgrind (RHEL-99465)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-35" date="1761220800">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121659</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-36" date="1763640000">- rebuild for c9s (RHEL-125838)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-37" date="1764244800">- openssl: respect system crypto policy for TLS max version (RHEL-128914)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-38" date="1764590400">- http: fix crash in rate-limited upload (RHEL-131696)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-39" date="1766059200">- openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40" date="1768996800">- openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721)</changelog>
</package>
<package pkgid="1b1daa9993c482f36c4f7d42d3f64e1ad270543045979365bb40a747a55fae65" name="libcurl-minimal-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.76.1" rel="40.el9"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-31" date="1724328000">- provide common cleanup method for push headers (CVE-2024-2398)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-32" date="1734436800">- make up incomplete patch for host name wildcard checking (RHEL-5675)
- eliminate use of obsolete patch syntax (RHEL-65791)
- http2: make sure pause is done on HTTP (RHEL-85847)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-33" date="1747310400">- noproxy: support proxies specified using cidr notation (RHEL-81412)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-34" date="1753272000">- revert several disabled tests related to openssl/valgrind (RHEL-99465)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-35" date="1761220800">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121659</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-36" date="1763640000">- rebuild for c9s (RHEL-125838)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-37" date="1764244800">- openssl: respect system crypto policy for TLS max version (RHEL-128914)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-38" date="1764590400">- http: fix crash in rate-limited upload (RHEL-131696)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-39" date="1766059200">- openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.76.1-40" date="1768996800">- openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721)</changelog>
</package>
<package pkgid="c6ad9b59fa93d0f07a99a099ab4be1e83541e019cd4d16fc7c6dd52b115d1f01" name="libdnf-debuginfo" arch="i686">
  <version epoch="0" ver="0.69.0" rel="18.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-13" date="1738756800">- Add persistence configuration option (RHEL-78024)</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.69.0-14" date="1741780800">- module: Warn if module config file is inaccessible (RHEL-62833)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.69.0-15" date="1750939200">- history DB: Add "persistence" column (RHEL-100623)
- conf: Add bootc_unsafe_paths (RHEL-100622)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.69.0-16" date="1751284800">- Introduce $releasever_major, $releasever_minor variables, shell-style
  variable substitution (RHEL-95006)</changelog>
  <changelog author="Matej Focko &lt;mfocko@redhat.com&gt; - 0.69.0-17" date="1770120000">- Fix comparison of RPM items in the transaction (RHEL-81779)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 0.69.0-18" date="1770638400">- Fix a crash when parsing multiple key files fails (RHEL-145618)
- Mark all protected packages as user installed for all transactions (RHEL-76112)
- Add `filterUnneededExtraUserinstalled` and Python version to the API
- Describe all problems even when there are protected removals (RHEL-115194)
- Clearer error for protected package broken dependencies</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 0.69.0-18" date="1782302400">- Add Navix bugtracker</changelog>
</package>
<package pkgid="6e8130d13096c2bf72c1b9fa2397b45df374765ac7ac1f5b2d90e8bf0a8b538f" name="libdnf-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="18.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-13" date="1738756800">- Add persistence configuration option (RHEL-78024)</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.69.0-14" date="1741780800">- module: Warn if module config file is inaccessible (RHEL-62833)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.69.0-15" date="1750939200">- history DB: Add "persistence" column (RHEL-100623)
- conf: Add bootc_unsafe_paths (RHEL-100622)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.69.0-16" date="1751284800">- Introduce $releasever_major, $releasever_minor variables, shell-style
  variable substitution (RHEL-95006)</changelog>
  <changelog author="Matej Focko &lt;mfocko@redhat.com&gt; - 0.69.0-17" date="1770120000">- Fix comparison of RPM items in the transaction (RHEL-81779)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 0.69.0-18" date="1770638400">- Fix a crash when parsing multiple key files fails (RHEL-145618)
- Mark all protected packages as user installed for all transactions (RHEL-76112)
- Add `filterUnneededExtraUserinstalled` and Python version to the API
- Describe all problems even when there are protected removals (RHEL-115194)
- Clearer error for protected package broken dependencies</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 0.69.0-18" date="1782302400">- Add Navix bugtracker</changelog>
</package>
<package pkgid="47a1dd96de006aa84a4de5e1d467a700cd260132fb9f3cf4105d2492e7401c35" name="libeconf-debuginfo" arch="i686">
  <version epoch="0" ver="0.4.1" rel="7.el9_8"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-4" date="1712836800">- Fix static analyzer detected issues. Resolves: RHEL-24989</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-5" date="1765281600">- Avoid double-free memory corruption. Resolves: RHEL-130877</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-6" date="1775649600">- Add libeconf-devel to a public repo. Resolves: RHEL-126957</changelog>
</package>
<package pkgid="b8b7469ba174b10cbfc33318e64aa355756e4c1a024dae873e9fc9fc83b57620" name="libeconf-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.1" rel="7.el9_8"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-4" date="1712836800">- Fix static analyzer detected issues. Resolves: RHEL-24989</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-5" date="1765281600">- Avoid double-free memory corruption. Resolves: RHEL-130877</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-6" date="1775649600">- Add libeconf-devel to a public repo. Resolves: RHEL-126957</changelog>
</package>
<package pkgid="5f6ac25e6c0043a74a1078ad5283e942a2fc0acdc79193c14ff7d3e38bb22299" name="libeconf-debugsource" arch="i686">
  <version epoch="0" ver="0.4.1" rel="7.el9_8"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-4" date="1712836800">- Fix static analyzer detected issues. Resolves: RHEL-24989</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-5" date="1765281600">- Avoid double-free memory corruption. Resolves: RHEL-130877</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-6" date="1775649600">- Add libeconf-devel to a public repo. Resolves: RHEL-126957</changelog>
</package>
<package pkgid="e79378a89c4046c2f798806f7e73c719e7137e3f18cd86df0f794c55e4d7827a" name="libeconf-debugsource" arch="x86_64">
  <version epoch="0" ver="0.4.1" rel="7.el9_8"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-4" date="1712836800">- Fix static analyzer detected issues. Resolves: RHEL-24989</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-5" date="1765281600">- Avoid double-free memory corruption. Resolves: RHEL-130877</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-6" date="1775649600">- Add libeconf-devel to a public repo. Resolves: RHEL-126957</changelog>
</package>
<package pkgid="3acdba0f5470d027959e4c34336e48930f920353d487936c19c7092dd96663c7" name="libedit-debuginfo" arch="i686">
  <version epoch="0" ver="3.1" rel="39.20210216cvs.el9"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 3.1-39.20210216cvs" date="1768478400">- Fix removing of readline callback handler (RHEL-133732)</changelog>
</package>
<package pkgid="72f0b2a4d571a7a29c745a838fd03bf09f12152229cea714b9cf6966e1b23ee2" name="libedit-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1" rel="39.20210216cvs.el9"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 3.1-39.20210216cvs" date="1768478400">- Fix removing of readline callback handler (RHEL-133732)</changelog>
</package>
<package pkgid="ba5c95b4ae042ee6b7d853274b7cc11e757e584c9ded417b1de460789f4d1ae4" name="libexif-debuginfo" arch="i686">
  <version epoch="0" ver="0.6.22" rel="6.el9_8.1"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.6.22-6.1" date="1778155200">- Fix integer underflow in MakerNote decoding (CVE-2026-40386)
- Fix integer overflow in Nikon MakerNote handling (CVE-2026-40385)
  Resolves: RHEL-170253, RHEL-170234</changelog>
</package>
<package pkgid="d92b26fa99b06c939f5e166174909c666b03d3d79fa1453bd4e01fb1091c5400" name="libexif-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.6.22" rel="6.el9_8.1"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.6.22-6.1" date="1778155200">- Fix integer underflow in MakerNote decoding (CVE-2026-40386)
- Fix integer overflow in Nikon MakerNote handling (CVE-2026-40385)
  Resolves: RHEL-170253, RHEL-170234</changelog>
</package>
<package pkgid="0a5faaaee91353962ead0a81b970fb495586a0741d58e4109238e3f4908f3658" name="libexif-debugsource" arch="i686">
  <version epoch="0" ver="0.6.22" rel="6.el9_8.1"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.6.22-6.1" date="1778155200">- Fix integer underflow in MakerNote decoding (CVE-2026-40386)
- Fix integer overflow in Nikon MakerNote handling (CVE-2026-40385)
  Resolves: RHEL-170253, RHEL-170234</changelog>
</package>
<package pkgid="d3dbb4d1eda3361cb9eb712178b6716f2669cb487bba7b7d52ba98b8a06d480e" name="libexif-debugsource" arch="x86_64">
  <version epoch="0" ver="0.6.22" rel="6.el9_8.1"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.6.22-6.1" date="1778155200">- Fix integer underflow in MakerNote decoding (CVE-2026-40386)
- Fix integer overflow in Nikon MakerNote handling (CVE-2026-40385)
  Resolves: RHEL-170253, RHEL-170234</changelog>
</package>
<package pkgid="9fb61dccedc45e1925dec3ad3858b3c5dc8d70ab67b1abe03c0e03f257a1c833" name="libfdisk-debuginfo" arch="i686">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="26252e57bece53260072ffd1f3ea6322f811a2520fd039e5011291f8bede0704" name="libfdisk-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="a186c4f8d92e35083eb29f6ecca408dbfac2165275c3285843f56c632000fdd8" name="libgcrypt-debuginfo" arch="i686">
  <version epoch="0" ver="1.10.0" rel="13.el9_8"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-11" date="1722513600">- Fix CVE-2024-2236 (RHEL-34579)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0.12" date="1782475200">- Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-13" date="1782820800">- Bump version to fix wrong build target.</changelog>
</package>
<package pkgid="bc724c1b4487ab16bf1631fd4572939e13abfd464d0a9077ff35207a7f165dfc" name="libgcrypt-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="13.el9_8"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-11" date="1722513600">- Fix CVE-2024-2236 (RHEL-34579)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0.12" date="1782475200">- Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-13" date="1782820800">- Bump version to fix wrong build target.</changelog>
</package>
<package pkgid="cf92539f3f5784134d520f5d179dfec564a2e68e9361beac835bfdf0d03cf4f0" name="libgcrypt-debugsource" arch="i686">
  <version epoch="0" ver="1.10.0" rel="13.el9_8"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-11" date="1722513600">- Fix CVE-2024-2236 (RHEL-34579)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0.12" date="1782475200">- Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-13" date="1782820800">- Bump version to fix wrong build target.</changelog>
</package>
<package pkgid="dd839bef7841b5283c8ffc6bf7133a01649c22d6fe4b06adf0061ef544da0417" name="libgcrypt-debugsource" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="13.el9_8"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-11" date="1722513600">- Fix CVE-2024-2236 (RHEL-34579)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0.12" date="1782475200">- Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-13" date="1782820800">- Bump version to fix wrong build target.</changelog>
</package>
<package pkgid="8bb6c0322a144ca420c53b2d373f878e48919c73f5762b38e4f51fdef087412b" name="libgcrypt-devel-debuginfo" arch="i686">
  <version epoch="0" ver="1.10.0" rel="13.el9_8"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-11" date="1722513600">- Fix CVE-2024-2236 (RHEL-34579)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0.12" date="1782475200">- Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-13" date="1782820800">- Bump version to fix wrong build target.</changelog>
</package>
<package pkgid="38f37ff0ea2ec517c196700e6f9ba4ac345f52845a4e2f3f4222ccbfbc3d597c" name="libgcrypt-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="13.el9_8"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-11" date="1722513600">- Fix CVE-2024-2236 (RHEL-34579)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0.12" date="1782475200">- Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.0-13" date="1782820800">- Bump version to fix wrong build target.</changelog>
</package>
<package pkgid="3119d43573ea1115883aa81fbda450a4cfbb38f9144bd416da53e1c95d5f7aad" name="libibumad-debuginfo" arch="i686">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="cb3af7a5d334294b0b6b179a74b985c36e7ccec65bcdbfad32b3ee43a8590dbb" name="libibumad-debuginfo" arch="x86_64">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="480ea682853a2a10465f969ffe49d280c7c52f1a4d5ca2590e17cf1e0c388845" name="libibverbs-debuginfo" arch="i686">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="3fc74b3afd49da7ac8051be71e052d3acc6a0aee2b10ef99c141dc1191e5e9b0" name="libibverbs-debuginfo" arch="x86_64">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="5c853c65d07d36fe32bba07766c7dc3d82520d28e2725b86c11ade53e5fb3198" name="libibverbs-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="34c34ef29b27552a93071216d1e6c567998a7b618043cd01ad496dd5ee953616" name="libipa_hbac-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="cd784576074bef8f644450059b07bdd3749669cf39aeb3be80c6e8a49fa888a5" name="libipa_hbac-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="afe797148932d4b54bf90816ed06f7bfea9efbd00b255379fd5c74b62d51b91c" name="libipa_hbac-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="62bf98eda5ffd07d620d8b5fb925262db1ee6d09471cf3127ce40e3fc0f48a1c" name="libipa_hbac-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="befe276d0075424893bee9acef227830bddaecb09ab23ddd40a62b22e304c824" name="libkadm5-debuginfo" arch="i686">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="f3a8b3a95161c8ae479e8cdac7945de4e0abce068ad2364d33d7016465a66fa5" name="libkadm5-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="d52dc8d2ca8d7f999cba203e114517330e0d725ba6a9bb59f7da12532b53a205" name="libldb-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="db529507e12a2c8bd8b4593a0872716b3cec2b381a6866710936f2706dfd076b" name="libldb-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="532fe2c6a769226efc1297f1ba67d4110d2c4c272369fe7f023ae451ccb5dc23" name="libmount-debuginfo" arch="i686">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="994ace0c9ed348cb2896b88a1fee74f14fcb774a0aa636812be7b8603911de29" name="libmount-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="713e9eb5f82d0a4af6b39e6c1e46f279870feff4aae78ac88556d6e98aae4146" name="libnetapi-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="206697f2e865042fdf6722e2ecab229cb8a8e7e4ac4ab29996e94d15b371ccd7" name="libnetapi-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="786ad6b5a890ce85e608e1eee91820afa62a91a94e14f07962c75152e5fbab8f" name="libnfsidmap-debuginfo" arch="i686">
  <version epoch="1" ver="2.5.4" rel="42.el9"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-33" date="1739620800">- Add nfs.conf to nfsv4-client-utils package (RHEL-72013)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-34" date="1739707200">- mountstats/nfsiostat: bugfixes for iostat (RHEL-72243)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-35" date="1745323200">- nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
- nfsd: allow more than 64 backlogged connections (RHEL-87752)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-36" date="1745582400">- mountstats: verify that old and new types are the same (RHEL-88553)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-37" date="1745668800">- gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
- gssd: do not use krb5_cc_initialize (RHEL-85412)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-38" date="1749729600">- ensure services are stopped when nfs-utils is uninstalled (RHEL-88422)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-39" date="1758196800">- Fix dependency definition in rpc-statd.service (RHEL-116079)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-40" date="1765195200">- nfsrahead: modify get_device_info logic (RHEL-134397)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-41" date="1767960000">- gssd: protect kerberos ticket cache access (RHEL-138462)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-42" date="1772798400">- Replace statfs64 with statfs (RHEL-127105)
- NFS export symlink vulnerability fix (RHEL-127105)
- mountd: Minor refactor of get_rootfh() (RHEL-127105)
- mountd: Separate lookup of the exported directory and the mount path (RHEL-127105)
- support: Add a mini-library to extract and apply RPC credentials (RHEL-127105)
- Fix access checks when mounting subdirectories in NFSv3 (RHEL-127105)
- Add requires for selinux-policy (RHEL-127105)
  Resolves: CVE-2025-12801</changelog>
</package>
<package pkgid="571b5a4dbfb1811314ce9e3a2c9ef5661deb892c59a10beb71e8c097a4591078" name="libnfsidmap-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.5.4" rel="42.el9"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-33" date="1739620800">- Add nfs.conf to nfsv4-client-utils package (RHEL-72013)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-34" date="1739707200">- mountstats/nfsiostat: bugfixes for iostat (RHEL-72243)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-35" date="1745323200">- nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
- nfsd: allow more than 64 backlogged connections (RHEL-87752)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-36" date="1745582400">- mountstats: verify that old and new types are the same (RHEL-88553)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-37" date="1745668800">- gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
- gssd: do not use krb5_cc_initialize (RHEL-85412)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-38" date="1749729600">- ensure services are stopped when nfs-utils is uninstalled (RHEL-88422)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-39" date="1758196800">- Fix dependency definition in rpc-statd.service (RHEL-116079)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-40" date="1765195200">- nfsrahead: modify get_device_info logic (RHEL-134397)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-41" date="1767960000">- gssd: protect kerberos ticket cache access (RHEL-138462)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-42" date="1772798400">- Replace statfs64 with statfs (RHEL-127105)
- NFS export symlink vulnerability fix (RHEL-127105)
- mountd: Minor refactor of get_rootfh() (RHEL-127105)
- mountd: Separate lookup of the exported directory and the mount path (RHEL-127105)
- support: Add a mini-library to extract and apply RPC credentials (RHEL-127105)
- Fix access checks when mounting subdirectories in NFSv3 (RHEL-127105)
- Add requires for selinux-policy (RHEL-127105)
  Resolves: CVE-2025-12801</changelog>
</package>
<package pkgid="296078011bb860ccab33eec6d7d4cfae884347ff91b8bfa184446829cf512432" name="libnghttp2-debuginfo" arch="i686">
  <version epoch="0" ver="1.43.0" rel="6.el9_7.1"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6" date="1712750400">- fix CONTINUATION frames DoS (CVE-2024-28182, CVE-2024-27316)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.1" date="1775044800">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
</package>
<package pkgid="1ef39ac1f8ece011e413d3af7bba31517b83be5385294a5959ccef26c7272642" name="libnghttp2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.43.0" rel="6.el9_7.1"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6" date="1712750400">- fix CONTINUATION frames DoS (CVE-2024-28182, CVE-2024-27316)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.1" date="1775044800">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
</package>
<package pkgid="039c6cc8e0e2a5cf090ac2d06ee8fd8b87814f7b0c6bff3d9b3b1910e315b913" name="libnghttp2-debuginfo" arch="i686">
  <version epoch="0" ver="1.43.0" rel="6.el9_8.2"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.1" date="1775044800">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.2" date="1786536000">- fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)</changelog>
</package>
<package pkgid="5c3183c4ef6f700b9df9122d4f7369ca324ce894f5447d65c4e9471697dd12e9" name="libnghttp2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.43.0" rel="6.el9_8.2"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.1" date="1775044800">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.2" date="1786536000">- fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)</changelog>
</package>
<package pkgid="9c51e4388e81ccbd39639971c0e29804d5cdb4068a5e7a4840ce97fc03f3565f" name="libnsl-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="b9f13ef49f4d79d210ad4ef8725a84145b7fd0caa90987c140193e8703241483" name="libnsl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="674779203d49e262331242de87b7325b5dde02a92adb75824594ca7bc467706c" name="libnsl-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="ce8a47c10f93d4022a6fda7246a87fe8539e2ab8f42bb94e4cbe10240d97cf8a" name="libnsl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="5eeac0522be92e4d6c6ef38755576b3db00ec128b9b00a7101d4d6bfbccf7738" name="libnsl-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="eb5c3228df04ef09677a59140658c40d1039fc579bc50b4b055f1c757fe42be5" name="libnsl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="be38bf2c4f4ae98c0475aa6f258c4fe2ca4a9efa0d716cfde9de311df887d5e6" name="libnsl-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="fb5c00334c8abdbb15a14474152dac8218203329392ad9056463ed0fe56f3bcf" name="libnsl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="c7d97213e6e8a22a2a9dbdd3b82997f1b2b9711cc538f54c51c9b9670d7c59ce" name="libnvme-debuginfo" arch="i686">
  <version epoch="0" ver="1.16.1" rel="3.el9_8"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.9-1" date="1715083200">- Rebase to version 1.9</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 1.9-2" date="1721822400">- Backport URI parser API</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.9-3" date="1722513600">- Backport fix for RHEL-49544</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.10-1" date="1728302400">- Update to latest upstream version RHEL-61573</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.11-1" date="1731412800">- Update libnvme to version 1.11 (RHEL-67145)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.11.1-1" date="1732017600">- TLS Fixes (RHEL-53980)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.13-1" date="1745928000">- Update to version 1.13 (RHEL-88847)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-1" date="1763640000">- Rebase to version 1.16.1 (RHEL-114102)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-2" date="1763726400">- Respin for RHEL-114102</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-3" date="1773230400">- Fix linked list corruption RHEL-146273</changelog>
</package>
<package pkgid="a6583b08cb65a5a3fbc09c3963e581d074a37fe21c5aa777dd5b9c80843726fd" name="libnvme-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.el9_8"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.9-1" date="1715083200">- Rebase to version 1.9</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 1.9-2" date="1721822400">- Backport URI parser API</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.9-3" date="1722513600">- Backport fix for RHEL-49544</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.10-1" date="1728302400">- Update to latest upstream version RHEL-61573</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.11-1" date="1731412800">- Update libnvme to version 1.11 (RHEL-67145)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.11.1-1" date="1732017600">- TLS Fixes (RHEL-53980)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.13-1" date="1745928000">- Update to version 1.13 (RHEL-88847)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-1" date="1763640000">- Rebase to version 1.16.1 (RHEL-114102)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-2" date="1763726400">- Respin for RHEL-114102</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-3" date="1773230400">- Fix linked list corruption RHEL-146273</changelog>
</package>
<package pkgid="36c8ec3fe85762561d7fdedae676d28e3f8a45002711a6d0adb49f7e7230fbb1" name="libperf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.12.1" date="1779969600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.12.1" date="1782993600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="76bbae654804514d2377ca79efbf3bb956a95f9eb5d5e67b731581a102c3f480" name="libperf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.15.1" date="1782993600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="5e2e390891b6be65048d428ca9b3041d4561c208d4af06a04524ebea6d9b1d2b" name="libperf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.17.1" date="1782993600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="50fb0e2318f71cee5c82b64553361d75bbc2445a7f2d083d137bd2bb937a499e" name="libperf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.24.1" date="1784030400">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="694f37f2b31cd0aafd638a5cd64ddfd823b07458817b9ac137c46f7af5f7e56d" name="libperf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.25.1" date="1784116800">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="ef5c4a55f993469ceaa5ebba9296fd7196b62f233871cd07b39558adfc83b6c3" name="libperf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944000">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.26.1" date="1784289600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="416da4021181c937a8a19fd79f581f360565af71b4bb32765887e7e156394e24" name="libperf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.30.1" date="1785153600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.30.1" date="1785240000">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="e976c8028ec2157a205642417d3c7554f306d92b92d1f8c39808816752cc3328" name="libperf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.31.1" date="1785240000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.31.1" date="1785499200">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="adcd26478e63a9f441f921459d47aa28038c3c68e4ccefe58cdfdf74c94dc372" name="libperf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.33.1" date="1785499200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.33.1" date="1785844800">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="2654038cd3b2a2b74179758a472fa7fe3c5e54495249e491f12b58c90f7c12f7" name="libperf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.34.1" date="1785844800">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.34.1" date="1786190400">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="79a75c47f0010d70b3a91aba9c89e2faa79f73a0390f487a2c77e5795b981929" name="libperf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.36.1" date="1786017600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.36.1" date="1786536000">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="449029e7a9116399f722e16bc8fde972324ea7cf1269287023d6d48167fd6262" name="libperf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.39.1" date="1786622400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.39.1" date="1786881600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="6c7dc3aa29b9c4d202af3271dc7985c8903107928ac5c5d8afec9b15e838d7d6" name="libpng-debuginfo" arch="i686">
  <version epoch="2" ver="1.6.37" rel="15.el9_8.2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-13" date="1768996800">- CVE-2025-64720: buffer overflow (RHEL-131594)
- CVE-2025-65018: heap buffer overflow (RHEL-131603)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-14" date="1771502400">- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356)
- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15.1" date="1777291200">- fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon (RHEL-161299)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15.2" date="1779796800">- fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161448)</changelog>
</package>
<package pkgid="62588b13fb92614b88e5a9a20cd21402589b8d811f160110c141bce7c966f8f5" name="libpng-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.6.37" rel="15.el9_8.2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-13" date="1768996800">- CVE-2025-64720: buffer overflow (RHEL-131594)
- CVE-2025-65018: heap buffer overflow (RHEL-131603)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-14" date="1771502400">- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356)
- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15.1" date="1777291200">- fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon (RHEL-161299)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15.2" date="1779796800">- fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161448)</changelog>
</package>
<package pkgid="6829c849dfdb6b5fccaac0bc5eb1cf6e860f58ee6872df0e84a18ea090c3790e" name="libpng-debuginfo" arch="i686">
  <version epoch="2" ver="1.6.37" rel="15.el9_8"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-13" date="1768996800">- CVE-2025-64720: buffer overflow (RHEL-131594)
- CVE-2025-65018: heap buffer overflow (RHEL-131603)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-14" date="1771502400">- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356)
- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411)</changelog>
</package>
<package pkgid="bf2648f0824b426d53ce8437d7b3d03020e7e9145050fa429249041c09278384" name="libpng-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.6.37" rel="15.el9_8"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-13" date="1768996800">- CVE-2025-64720: buffer overflow (RHEL-131594)
- CVE-2025-65018: heap buffer overflow (RHEL-131603)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-14" date="1771502400">- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356)
- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411)</changelog>
</package>
<package pkgid="0d8ff52c714f3e5f622468354c1e19319c8d6dfdf01e86f26c6e112940945183" name="libpng-debugsource" arch="i686">
  <version epoch="2" ver="1.6.37" rel="15.el9_8.2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-13" date="1768996800">- CVE-2025-64720: buffer overflow (RHEL-131594)
- CVE-2025-65018: heap buffer overflow (RHEL-131603)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-14" date="1771502400">- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356)
- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15.1" date="1777291200">- fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon (RHEL-161299)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15.2" date="1779796800">- fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161448)</changelog>
</package>
<package pkgid="778053558abcd156ece39b3bb02a314d0f50a87b66ac8cc2854490952646edcc" name="libpng-debugsource" arch="x86_64">
  <version epoch="2" ver="1.6.37" rel="15.el9_8.2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-13" date="1768996800">- CVE-2025-64720: buffer overflow (RHEL-131594)
- CVE-2025-65018: heap buffer overflow (RHEL-131603)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-14" date="1771502400">- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356)
- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15.1" date="1777291200">- fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon (RHEL-161299)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15.2" date="1779796800">- fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161448)</changelog>
</package>
<package pkgid="b3e8be208e8104f92905dcb83574b15d98e12c207f7ff55e95018f812e759baf" name="libpng-devel-debuginfo" arch="i686">
  <version epoch="2" ver="1.6.37" rel="15.el9_8.2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-13" date="1768996800">- CVE-2025-64720: buffer overflow (RHEL-131594)
- CVE-2025-65018: heap buffer overflow (RHEL-131603)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-14" date="1771502400">- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356)
- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15.1" date="1777291200">- fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon (RHEL-161299)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15.2" date="1779796800">- fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161448)</changelog>
</package>
<package pkgid="8bca128a4a7bbf742109243b00b9c33f7054496c062bfa33c34938b7b58b3777" name="libpng-devel-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.6.37" rel="15.el9_8.2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-13" date="1768996800">- CVE-2025-64720: buffer overflow (RHEL-131594)
- CVE-2025-65018: heap buffer overflow (RHEL-131603)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-14" date="1771502400">- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356)
- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15.1" date="1777291200">- fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon (RHEL-161299)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15.2" date="1779796800">- fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161448)</changelog>
</package>
<package pkgid="ec489d5eb435850c378633e850c7f569780076ae59b83b87fb40d37e8ed325a7" name="libpq-debuginfo" arch="i686">
  <version epoch="0" ver="13.23" rel="3.el9_8"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 13.15-1" date="1721304000">- Update to 13.15</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 13.20-1" date="1739966400">- Update to 13.20</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 13.23-1" date="1764590400">- Rebase to upstream release 13.23
- Resolves: RHEL-131279 (CVE-2025-12818)</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 13.23-2" date="1784203200">- Backport fixes for CVE-2026-6478, CVE-2026-6637, CVE-2026-6477,
  CVE-2026-6475, CVE-2026-6473 from PostgreSQL 14.23
- Resolves: RHEL-192239</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 13.23-3" date="1784289600">- Add BuildRequires for perl-File-Compare needed by genbki.pl
- Related: RHEL-192239</changelog>
</package>
<package pkgid="bc0f0c3e5196d8d600e1a517e43959ac1f914cd7b960b5c44d13725459731eeb" name="libpq-debuginfo" arch="x86_64">
  <version epoch="0" ver="13.23" rel="3.el9_8"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 13.15-1" date="1721304000">- Update to 13.15</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 13.20-1" date="1739966400">- Update to 13.20</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 13.23-1" date="1764590400">- Rebase to upstream release 13.23
- Resolves: RHEL-131279 (CVE-2025-12818)</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 13.23-2" date="1784203200">- Backport fixes for CVE-2026-6478, CVE-2026-6637, CVE-2026-6477,
  CVE-2026-6475, CVE-2026-6473 from PostgreSQL 14.23
- Resolves: RHEL-192239</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 13.23-3" date="1784289600">- Add BuildRequires for perl-File-Compare needed by genbki.pl
- Related: RHEL-192239</changelog>
</package>
<package pkgid="ff3554c8d93f48816c56a11e24c7ffdc836ef5c03568d4852db5f92df3de50e6" name="libpq-debugsource" arch="i686">
  <version epoch="0" ver="13.23" rel="3.el9_8"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 13.15-1" date="1721304000">- Update to 13.15</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 13.20-1" date="1739966400">- Update to 13.20</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 13.23-1" date="1764590400">- Rebase to upstream release 13.23
- Resolves: RHEL-131279 (CVE-2025-12818)</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 13.23-2" date="1784203200">- Backport fixes for CVE-2026-6478, CVE-2026-6637, CVE-2026-6477,
  CVE-2026-6475, CVE-2026-6473 from PostgreSQL 14.23
- Resolves: RHEL-192239</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 13.23-3" date="1784289600">- Add BuildRequires for perl-File-Compare needed by genbki.pl
- Related: RHEL-192239</changelog>
</package>
<package pkgid="9f1d3ca9c6183a167ae2c17833eda3ab95ce6929ff3af29c09c9c79f9fccbcbe" name="libpq-debugsource" arch="x86_64">
  <version epoch="0" ver="13.23" rel="3.el9_8"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 13.15-1" date="1721304000">- Update to 13.15</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 13.20-1" date="1739966400">- Update to 13.20</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 13.23-1" date="1764590400">- Rebase to upstream release 13.23
- Resolves: RHEL-131279 (CVE-2025-12818)</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 13.23-2" date="1784203200">- Backport fixes for CVE-2026-6478, CVE-2026-6637, CVE-2026-6477,
  CVE-2026-6475, CVE-2026-6473 from PostgreSQL 14.23
- Resolves: RHEL-192239</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 13.23-3" date="1784289600">- Add BuildRequires for perl-File-Compare needed by genbki.pl
- Related: RHEL-192239</changelog>
</package>
<package pkgid="35b7115d13e3f4166c0860f178a9d6071709aba2cb26eb55e957439649318dcb" name="libpq-devel-debuginfo" arch="i686">
  <version epoch="0" ver="13.23" rel="3.el9_8"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 13.15-1" date="1721304000">- Update to 13.15</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 13.20-1" date="1739966400">- Update to 13.20</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 13.23-1" date="1764590400">- Rebase to upstream release 13.23
- Resolves: RHEL-131279 (CVE-2025-12818)</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 13.23-2" date="1784203200">- Backport fixes for CVE-2026-6478, CVE-2026-6637, CVE-2026-6477,
  CVE-2026-6475, CVE-2026-6473 from PostgreSQL 14.23
- Resolves: RHEL-192239</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 13.23-3" date="1784289600">- Add BuildRequires for perl-File-Compare needed by genbki.pl
- Related: RHEL-192239</changelog>
</package>
<package pkgid="83b8a077d67d78bf6b15f917d08ff62bd99c784b32e54f54ed96f321c12d124b" name="libpq-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="13.23" rel="3.el9_8"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 13.15-1" date="1721304000">- Update to 13.15</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 13.20-1" date="1739966400">- Update to 13.20</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 13.23-1" date="1764590400">- Rebase to upstream release 13.23
- Resolves: RHEL-131279 (CVE-2025-12818)</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 13.23-2" date="1784203200">- Backport fixes for CVE-2026-6478, CVE-2026-6637, CVE-2026-6477,
  CVE-2026-6475, CVE-2026-6473 from PostgreSQL 14.23
- Resolves: RHEL-192239</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 13.23-3" date="1784289600">- Add BuildRequires for perl-File-Compare needed by genbki.pl
- Related: RHEL-192239</changelog>
</package>
<package pkgid="396c04b864bfd36ef108a1ce286f0bc23193b87e6ac13a1096e0d86e249e7c0b" name="librdmacm-debuginfo" arch="i686">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="568739187389642675294d9d5b50859d379e3e37fe8b2cfb8ec7e7ddf041205d" name="librdmacm-debuginfo" arch="x86_64">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="701cc943668f89a16ab9b13f8ee22b1769ba842c133de6468befe0b7e826e09b" name="librdmacm-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="b78e8fca539eacaee9c65abf4fc62415ab05cd74baa2c0945bef4ac88e267895" name="librepo-debuginfo" arch="i686">
  <version epoch="0" ver="1.19.0" rel="1.el9"/>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 1.14.5-3" date="1750766400">- Propagate return value from prepare_repo_download_targets (RHEL-85607)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.19.0-1" date="1764244800">- Rebase to 1.19.0 (RHEL-62033)</changelog>
</package>
<package pkgid="6ea0ebf5b5be11b58f2831fb6ea84848017838f57cc8db8a2879833902bf0593" name="librepo-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.19.0" rel="1.el9"/>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 1.14.5-3" date="1750766400">- Propagate return value from prepare_repo_download_targets (RHEL-85607)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.19.0-1" date="1764244800">- Rebase to 1.19.0 (RHEL-62033)</changelog>
</package>
<package pkgid="229d322f73b69e0301c027b89c5e4216cb41c9cc92802d914aa21d21099abe90" name="libreswan-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.15" rel="10.el9_8"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.15-1" date="1722340800">- Update to 4.15 (RHEL-50006)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.15-2" date="1722945600">- Fix auto=ondemand connection initialization with TCP (RHEL-51879)
- Make use of Netlink extack for additional error reporting (RHEL-51881)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.15-3" date="1722945601">- Fix release number</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.15-4" date="1731412800">- pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461)
- pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.15-5" date="1732276800">- crypto: refcnt struct secret_pubkey_stuff when passing to helper thread (RHEL-68047)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.15-6" date="1733227200">- Update libreswan-4.15-whack-fd-refcount.patch to be more complete (RHEL-61461)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.15-7" date="1734436800">- Remove libreswan-4.15-whack-fd-refcount.patch (RHEL-61461)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.15-8" date="1736856000">- showhostkey: fix regression after RHEL-68047 (RHEL-70842)</changelog>
  <changelog author="Daiki Ueno  &lt;dueno@redhat.com&gt; - 4.15-9" date="1782993600">- Backport fixes for CVE-2026-12413, CVE-2026-50721 and CVE-2026-50722 (RHEL-190120, RHEL-190125, RHEL-190155)</changelog>
  <changelog author="Daiki Ueno  &lt;dueno@redhat.com&gt; - 4.15-10" date="1784808000">- Backport fix for CVE-2026-14957 (RHEL-212107)</changelog>
</package>
<package pkgid="aa88be0b23836768769f74f7f1c67e43120007ad84aacabc9e061d63442b7d84" name="libreswan-debugsource" arch="x86_64">
  <version epoch="0" ver="4.15" rel="10.el9_8"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.15-1" date="1722340800">- Update to 4.15 (RHEL-50006)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.15-2" date="1722945600">- Fix auto=ondemand connection initialization with TCP (RHEL-51879)
- Make use of Netlink extack for additional error reporting (RHEL-51881)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.15-3" date="1722945601">- Fix release number</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.15-4" date="1731412800">- pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461)
- pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.15-5" date="1732276800">- crypto: refcnt struct secret_pubkey_stuff when passing to helper thread (RHEL-68047)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.15-6" date="1733227200">- Update libreswan-4.15-whack-fd-refcount.patch to be more complete (RHEL-61461)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.15-7" date="1734436800">- Remove libreswan-4.15-whack-fd-refcount.patch (RHEL-61461)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.15-8" date="1736856000">- showhostkey: fix regression after RHEL-68047 (RHEL-70842)</changelog>
  <changelog author="Daiki Ueno  &lt;dueno@redhat.com&gt; - 4.15-9" date="1782993600">- Backport fixes for CVE-2026-12413, CVE-2026-50721 and CVE-2026-50722 (RHEL-190120, RHEL-190125, RHEL-190155)</changelog>
  <changelog author="Daiki Ueno  &lt;dueno@redhat.com&gt; - 4.15-10" date="1784808000">- Backport fix for CVE-2026-14957 (RHEL-212107)</changelog>
</package>
<package pkgid="642d0c7b24dac87bede9c1fbf2133ae7d8eb384604ee1ed2a9455c791ae1e74a" name="libsane-hpaio-debuginfo" arch="i686">
  <version epoch="0" ver="3.21.2" rel="6.el9_8.4"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.1" date="1779883200">- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
  via OS command injection in Is_Process_Running()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.2" date="1781092800">- CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation
  via integer overflow in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.3" date="1781265600">- OSH fixes after CVE-2026-8631</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.4" date="1781524800">- Fix more leaks in hpcups</changelog>
</package>
<package pkgid="4b41a2443dd47e90803e3033dd918d1e912ddf9da37447e12d8a6c2dc3e76e82" name="libsane-hpaio-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.21.2" rel="6.el9_8.4"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.1" date="1779883200">- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
  via OS command injection in Is_Process_Running()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.2" date="1781092800">- CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation
  via integer overflow in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.3" date="1781265600">- OSH fixes after CVE-2026-8631</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.4" date="1781524800">- Fix more leaks in hpcups</changelog>
</package>
<package pkgid="e55ab8817a04a32120c46e336735ec3bddd8f455f341115304d2e9d44f632eda" name="libsane-hpaio-debuginfo" arch="i686">
  <version epoch="0" ver="3.21.2" rel="6.el9_8.5"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.1" date="1779883200">- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
  via OS command injection in Is_Process_Running()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.2" date="1781092800">- CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation
  via integer overflow in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.3" date="1781265600">- OSH fixes after CVE-2026-8631</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.4" date="1781524800">- Fix more leaks in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.5" date="1783080000">- RHEL-192001 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631</changelog>
</package>
<package pkgid="7e980ec5d5a9ce9bf7d4b883f15e683d15ee2f7c2c62a5b69ea92901849f7abf" name="libsane-hpaio-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.21.2" rel="6.el9_8.5"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.1" date="1779883200">- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
  via OS command injection in Is_Process_Running()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.2" date="1781092800">- CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation
  via integer overflow in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.3" date="1781265600">- OSH fixes after CVE-2026-8631</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.4" date="1781524800">- Fix more leaks in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.21.2-6.5" date="1783080000">- RHEL-192001 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631</changelog>
</package>
<package pkgid="dff641d86d835ac72551e88f648864eb97f8424175bcda4323a39cfbd5590a2f" name="libsmartcols-debuginfo" arch="i686">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="c8cff3cb05fbf54d5ad8a29a8f82e8e5f09c6040d13844f78c616d3bb9d5c869" name="libsmartcols-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="b2705152ed78273056ec26ada87ad7def73d2426a54e05a38634c7d261be89db" name="libsmbclient-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="c9677a97c568783965ba228478247e52d5bd22a03d0eb49704ee198fd8aa7013" name="libsmbclient-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="a4128354ca378c88da3fa787e3964f3913699404b6976cacf636173889d9c553" name="libsndfile-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.31" rel="9.el9_8.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.31-9" date="1732017600">- fix crash in ogg vorbis (#RHEL-65096) (CVE-2024-50612)</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.32-9.1" date="1779105600">- apply patch for CVE-2026-37555
  Resolves: ￼RHEL-174543</changelog>
</package>
<package pkgid="0207d2a7b34594ff46289d4051f40d22ce534557f5bd4881a0c81cb043524c03" name="libsndfile-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.31" rel="9.el9_8.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.31-9" date="1732017600">- fix crash in ogg vorbis (#RHEL-65096) (CVE-2024-50612)</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.32-9.1" date="1779105600">- apply patch for CVE-2026-37555
  Resolves: ￼RHEL-174543</changelog>
</package>
<package pkgid="8d60f1a823c88778a3d6babb7f9fe9fb58763c55e22b02c02087f67ccda6cbb2" name="libsndfile-debugsource" arch="i686">
  <version epoch="0" ver="1.0.31" rel="9.el9_8.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.31-9" date="1732017600">- fix crash in ogg vorbis (#RHEL-65096) (CVE-2024-50612)</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.32-9.1" date="1779105600">- apply patch for CVE-2026-37555
  Resolves: ￼RHEL-174543</changelog>
</package>
<package pkgid="c04048b5c053d845857fe112707ce0eb5141f6fd087b316f8ef73df14b1c5c82" name="libsndfile-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.31" rel="9.el9_8.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.31-9" date="1732017600">- fix crash in ogg vorbis (#RHEL-65096) (CVE-2024-50612)</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.32-9.1" date="1779105600">- apply patch for CVE-2026-37555
  Resolves: ￼RHEL-174543</changelog>
</package>
<package pkgid="5ddbb5e92b7004dd65c2973f300d0dd7b93a9cad05058a43f33b00d2c65fbc28" name="libsndfile-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.31" rel="9.el9_8.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.31-9" date="1732017600">- fix crash in ogg vorbis (#RHEL-65096) (CVE-2024-50612)</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.32-9.1" date="1779105600">- apply patch for CVE-2026-37555
  Resolves: ￼RHEL-174543</changelog>
</package>
<package pkgid="ce12a09ecc7209fd5a25480450cb3e1e8829771be83b396e126873f8865f1783" name="libsolv-debuginfo" arch="i686">
  <version epoch="0" ver="0.7.24" rel="5.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
</package>
<package pkgid="1c72c6fda55e160937b9ad432707d8b7ec84e156085e69d35c739f217555a44e" name="libsolv-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="5.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
</package>
<package pkgid="a5b1872b9c63c8e76b6748348d1a87b26d734bed3f37f0a5d3ceb49cbdd19ed6" name="libsolv-debuginfo" arch="i686">
  <version epoch="0" ver="0.7.24" rel="6.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.7.24-6" date="1780660800">- Fix a buffer overflow when decompressing solv pages (CVE-2026-48864)
  (RHEL-178982)</changelog>
</package>
<package pkgid="514d7f1da2c45b390ebbfbd7686b03b772d7f8931dd7e276d8246ff1299d26ac" name="libsolv-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="6.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.7.24-6" date="1780660800">- Fix a buffer overflow when decompressing solv pages (CVE-2026-48864)
  (RHEL-178982)</changelog>
</package>
<package pkgid="42cb7ca3ba2565b80ccec646981b5855fbc5e86456d0093642174e58451f0433" name="libsolv-debugsource" arch="i686">
  <version epoch="0" ver="0.7.24" rel="5.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
</package>
<package pkgid="dd89dc84f50f665847a8d01adbbf54ab298ec873b0bc57a059d34a7beba460e9" name="libsolv-debugsource" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="5.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
</package>
<package pkgid="330ddbade5df6c827e184b23edf255e535c0e28003f7d5dc0fb794323d7ac386" name="libsolv-debugsource" arch="i686">
  <version epoch="0" ver="0.7.24" rel="6.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.7.24-6" date="1780660800">- Fix a buffer overflow when decompressing solv pages (CVE-2026-48864)
  (RHEL-178982)</changelog>
</package>
<package pkgid="3dc41017ed9850b9d7ac433e663f12543651ae8dec364db9bd9820024527b9d8" name="libsolv-debugsource" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="6.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.7.24-6" date="1780660800">- Fix a buffer overflow when decompressing solv pages (CVE-2026-48864)
  (RHEL-178982)</changelog>
</package>
<package pkgid="991f196ace7a63b2e62e89f35911d51de4b2da0c4fa92ffbbd0adf3a10886c5b" name="libsolv-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="5.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
</package>
<package pkgid="19603a27888bfaf47566ae967eb855e5c763e34bd6ed0752daa8adeb9b3b3d3f" name="libsolv-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="6.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.7.24-6" date="1780660800">- Fix a buffer overflow when decompressing solv pages (CVE-2026-48864)
  (RHEL-178982)</changelog>
</package>
<package pkgid="676c2b85154c186f4e1e038f3a15e82cfd3bf69d16370eec0621106cc5617f49" name="libssh-debuginfo" arch="i686">
  <version epoch="0" ver="0.10.4" rel="18.el9"/>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 0.10.4-13" date="1708344000">- Bump up the version so that the version in 9.3 is lower.
- Resolves: RHEL-19310, RHEL-19691, RHEL-17245</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-14" date="1759233600">- Fix CVE-2025-5318
  Resolves: RHEL-111732</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-15" date="1759320000">- Bump spec to make the 9.7 NVR higher than the 9.6 one</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-16" date="1765454400">- Fix CVE-2025-5987
  Resolves: RHEL-130051
- Workaround sshd failure rate limiting in tests
  Resolves: RHEL-135506</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-17" date="1765540800">- Bump spec to resolve build tagging issues</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-18" date="1770984000">- Resolves: RHEL-150661
- Resolves: CVE-2025-4877
- Resolves: CVE-2025-4878
- Resolves: CVE-2025-5351
- Resolves: CVE-2025-8114
- Resolves: CVE-2025-8277
- Resolves: CVE-2026-0964
- Resolves: CVE-2026-0965
- Resolves: CVE-2026-0966
- Resolves: CVE-2026-0967
- Resolves: CVE-2026-0968</changelog>
</package>
<package pkgid="b57291bb6afd34000527e32c2deb8d905d37a9e9d962bde16785c114b82bfae5" name="libssh-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.10.4" rel="18.el9"/>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 0.10.4-13" date="1708344000">- Bump up the version so that the version in 9.3 is lower.
- Resolves: RHEL-19310, RHEL-19691, RHEL-17245</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-14" date="1759233600">- Fix CVE-2025-5318
  Resolves: RHEL-111732</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-15" date="1759320000">- Bump spec to make the 9.7 NVR higher than the 9.6 one</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-16" date="1765454400">- Fix CVE-2025-5987
  Resolves: RHEL-130051
- Workaround sshd failure rate limiting in tests
  Resolves: RHEL-135506</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-17" date="1765540800">- Bump spec to resolve build tagging issues</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.10.4-18" date="1770984000">- Resolves: RHEL-150661
- Resolves: CVE-2025-4877
- Resolves: CVE-2025-4878
- Resolves: CVE-2025-5351
- Resolves: CVE-2025-8114
- Resolves: CVE-2025-8277
- Resolves: CVE-2026-0964
- Resolves: CVE-2026-0965
- Resolves: CVE-2026-0966
- Resolves: CVE-2026-0967
- Resolves: CVE-2026-0968</changelog>
</package>
<package pkgid="ef7b21c26e06a4c108fbc66e6a392d958d940812d19dec9d607d1cdfd7804d80" name="libsss_autofs-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="f500d89bccbf946075fbc1416bb429f599a7b13b539eabda305092f4db14a09e" name="libsss_autofs-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="b65313f82736e14178d7078392a5259c53e2882c86b496b81fb9585123f854cf" name="libsss_certmap-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="c3c1b7eabaa0e9e8fa6c182bf87f952f0637196fdbb316f6d12318557fe7ebed" name="libsss_certmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="2aafd631254964287644eece643986b9178da01df9ac561a3a4f76bb08b764b8" name="libsss_certmap-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="c8f68385d641a1842a2aecfd48846359fb0b4f15a069a25251d4ce213985a627" name="libsss_certmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="d342813e50caaf70b86a1ffc9660f940d84297d7fed46aae0bd0453d759d6aa7" name="libsss_idmap-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="dd39ad2f4feab9504dd85a85e84b09301bccbcf867e396a097d343a165616d2f" name="libsss_idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="ca3bb01e2bac77cf215c306565333f6e706c2f700f205f98bed406e3439a3d05" name="libsss_idmap-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="7094ae59593845a004a68c50bae4d38992cc248718f7dc4f1e3dae586363c08d" name="libsss_idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="ef5dd2a386f93a7c41090f0ffb45961aaa67df8e2e98ffc2709e84250320e761" name="libsss_nss_idmap-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="05a47a4eba2d727b0c19cd1d03186115292b2294db94715175c2f44d0d4c7e58" name="libsss_nss_idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="a70bb0e2a02386af90e22732bc1d8d620db0f825c85b9ef4d21dbe74b53fe0fb" name="libsss_nss_idmap-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="a6e5fdb87a54eb499c7e5dde0f8e4d1865962d4ed01033c0cec9077c25e4243a" name="libsss_nss_idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="9fcfbdd531003db13d619275ac024b858203c2ed8989f360fa0583a9f448ee5d" name="libsss_simpleifp-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="28e62027b3efda09278d5cabb986503a3e7f8e9df8734518b0ace1cc215410bd" name="libsss_simpleifp-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="5595183423d9882a8aa029dd153470e30a518a6a65fc265517a09ed1c5883e82" name="libsss_simpleifp-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="111d1f03361b4d66577d96f1c6e7c4d8f502cfba737633b96dfd1c6898c6e73f" name="libsss_simpleifp-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="eda944f88bfc56030e9137465ac411d6c7225a928484bf7262941523701212dd" name="libsss_sudo-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="49ea5016ffaa9cb179be2683118c51b4f7dd3fb3a245bd7e4836f0eadfc74d25" name="libsss_sudo-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="5ea228d45cf23130da72efb8c62287ff6e92755007bf918b2944cf0cddf6eb86" name="libtasn1-debuginfo" arch="i686">
  <version epoch="0" ver="4.16.0" rel="10.el9_8"/>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 4.16.0-9" date="1739361600">- Backport the fix for CVE-2024-12133 (RHEL-78580)</changelog>
  <changelog author="Daiki Ueno  &lt;dueno@redhat.com&gt; - 4.16.0-10" date="1780315200">- Backport the fix for CVE-2025-13151 (RHEL-139568)</changelog>
</package>
<package pkgid="ff9ca1389d8a82d8feb039f3d925aca1f7f0833189973aa3c03576668210720a" name="libtasn1-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="10.el9_8"/>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 4.16.0-9" date="1739361600">- Backport the fix for CVE-2024-12133 (RHEL-78580)</changelog>
  <changelog author="Daiki Ueno  &lt;dueno@redhat.com&gt; - 4.16.0-10" date="1780315200">- Backport the fix for CVE-2025-13151 (RHEL-139568)</changelog>
</package>
<package pkgid="f955e7cc082b4a397c3fc9095453645a0438419450350ca4e6772c737a57998b" name="libtasn1-debugsource" arch="i686">
  <version epoch="0" ver="4.16.0" rel="10.el9_8"/>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 4.16.0-9" date="1739361600">- Backport the fix for CVE-2024-12133 (RHEL-78580)</changelog>
  <changelog author="Daiki Ueno  &lt;dueno@redhat.com&gt; - 4.16.0-10" date="1780315200">- Backport the fix for CVE-2025-13151 (RHEL-139568)</changelog>
</package>
<package pkgid="8dd73ce5cdd193226f8ed191c90479eaaaf86f3420fd2c9e0005bb2a11a88ad5" name="libtasn1-debugsource" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="10.el9_8"/>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 4.16.0-9" date="1739361600">- Backport the fix for CVE-2024-12133 (RHEL-78580)</changelog>
  <changelog author="Daiki Ueno  &lt;dueno@redhat.com&gt; - 4.16.0-10" date="1780315200">- Backport the fix for CVE-2025-13151 (RHEL-139568)</changelog>
</package>
<package pkgid="e456993ab08bd971886cc3936b735e54e39b3dd7e80af12fba9c1424758ab8a9" name="libtasn1-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="10.el9_8"/>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 4.16.0-9" date="1739361600">- Backport the fix for CVE-2024-12133 (RHEL-78580)</changelog>
  <changelog author="Daiki Ueno  &lt;dueno@redhat.com&gt; - 4.16.0-10" date="1780315200">- Backport the fix for CVE-2025-13151 (RHEL-139568)</changelog>
</package>
<package pkgid="83083581c346663e88a02aedea87ecfea88a015f8b7142f25044ca39d9b9b24f" name="libtiff-debuginfo" arch="i686">
  <version epoch="0" ver="4.4.0" rel="18.el9_8.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-13" date="1724241600">- fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52931)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-14" date="1745323200">- fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-15" date="1746446400">- backport documentation change for CVE-2023-52355 (RHEL-17328)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-16" date="1768737600">- fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112543)
- fix CVE-2025-8176: use after free in tiffmedian (RHEL-120238)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-15.3" date="1778155200">- fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159331)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-18" date="1778500800">- rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-18.1" date="1784030400">- fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189387)</changelog>
</package>
<package pkgid="079171342fe2a8fcc97c5f8c26b8a33024c030016e72ccfce2ba24e4cfc02fad" name="libtiff-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.4.0" rel="18.el9_8.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-13" date="1724241600">- fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52931)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-14" date="1745323200">- fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-15" date="1746446400">- backport documentation change for CVE-2023-52355 (RHEL-17328)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-16" date="1768737600">- fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112543)
- fix CVE-2025-8176: use after free in tiffmedian (RHEL-120238)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-15.3" date="1778155200">- fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159331)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-18" date="1778500800">- rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-18.1" date="1784030400">- fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189387)</changelog>
</package>
<package pkgid="51360058617cc8bc4579e3721b6a59172416dbb5266929f9cf040ca901c6da8a" name="libtiff-debugsource" arch="i686">
  <version epoch="0" ver="4.4.0" rel="18.el9_8.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-13" date="1724241600">- fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52931)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-14" date="1745323200">- fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-15" date="1746446400">- backport documentation change for CVE-2023-52355 (RHEL-17328)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-16" date="1768737600">- fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112543)
- fix CVE-2025-8176: use after free in tiffmedian (RHEL-120238)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-15.3" date="1778155200">- fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159331)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-18" date="1778500800">- rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-18.1" date="1784030400">- fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189387)</changelog>
</package>
<package pkgid="f6f5515ab70fc4672c290e348ce3cc3ea0abe268bcf88369d9ff7487c7e8f73d" name="libtiff-debugsource" arch="x86_64">
  <version epoch="0" ver="4.4.0" rel="18.el9_8.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-13" date="1724241600">- fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52931)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-14" date="1745323200">- fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-15" date="1746446400">- backport documentation change for CVE-2023-52355 (RHEL-17328)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-16" date="1768737600">- fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112543)
- fix CVE-2025-8176: use after free in tiffmedian (RHEL-120238)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-15.3" date="1778155200">- fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159331)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-18" date="1778500800">- rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-18.1" date="1784030400">- fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189387)</changelog>
</package>
<package pkgid="b3472e8b981b921eeadb0ecc70958275dd865c343c8facbcb229bae270b32022" name="libtiff-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.4.0" rel="18.el9_8.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-13" date="1724241600">- fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52931)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-14" date="1745323200">- fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-15" date="1746446400">- backport documentation change for CVE-2023-52355 (RHEL-17328)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-16" date="1768737600">- fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112543)
- fix CVE-2025-8176: use after free in tiffmedian (RHEL-120238)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-15.3" date="1778155200">- fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159331)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-18" date="1778500800">- rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-18.1" date="1784030400">- fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189387)</changelog>
</package>
<package pkgid="3479559439f3d6ae6fd6973fff7dca4088b89b56f655ec842998e06c8124ca42" name="libtracecmd-debuginfo" arch="i686">
  <version epoch="0" ver="1.5.2" rel="3.el9"/>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-1" date="1740484800">- Rebase to version 3.3.1 (RHEL-76155)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-2" date="1741694400">- Rebuild without side-tags (RHEL-76155)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-3" date="1770206400">- Fix trace messages (RHEL-86597)</changelog>
</package>
<package pkgid="caf85532dcfcbf1cae3403e5465eb907e634ff5057da2adeefb6928b3b386919" name="libtracecmd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="3.el9"/>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-1" date="1740484800">- Rebase to version 3.3.1 (RHEL-76155)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-2" date="1741694400">- Rebuild without side-tags (RHEL-76155)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-3" date="1770206400">- Fix trace messages (RHEL-86597)</changelog>
</package>
<package pkgid="4af82b6d7ea267546ab8fe2e778621ec4dbae5422e383788c67ced5a8f864541" name="libtsan2-debuginfo" arch="x86_64">
  <version epoch="0" ver="14.2.1" rel="13.el9"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.2.1-1.1" date="1723550400">- do not hide _ZSt21ios_base_library_initv</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.2.1-1.2" date="1724328000">- bump NVR (RHEL-53492)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.2.1-7" date="1737547200">- update from releases/gcc-14 branch (RHEL-74061)
  - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
	c++/118069, driver/117942, fortran/84674, fortran/84869,
	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
	libstdc++/109517, libstdc++/109976, libstdc++/112349,
	libstdc++/112641, libstdc++/117520, libstdc++/117560,
	libstdc++/117822, libstdc++/117962, libstdc++/117966,
	libstdc++/118035, libstdc++/118093, middle-end/43374,
	middle-end/102674, middle-end/116997, middle-end/117433,
	middle-end/117458, middle-end/117459, middle-end/117847,
	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
	modula2/117660, modula2/117904, modula2/117948, other/116603,
	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
	rtl-optimization/117095, sanitizer/117960, target/64242,
	target/114801, target/114942, target/116371, target/116629,
	target/116999, target/117045, target/117105, target/117304,
	target/117357, target/117408, target/117418, target/117443,
	target/117500, target/117525, target/117562, target/117564,
	target/117642, target/117659, target/117675, target/117744,
	target/117926, testsuite/103298, testsuite/109360,
	tree-optimization/94589, tree-optimization/112376,
	tree-optimization/116463, tree-optimization/117142,
	tree-optimization/117254, tree-optimization/117307,
	tree-optimization/117333, tree-optimization/117398,
	tree-optimization/117417, tree-optimization/117439,
	tree-optimization/117574, tree-optimization/117594,
	tree-optimization/117612, tree-optimization/117912
- fix up -freport-bug default (#2330362, RHEL-70192)
- revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
  aarch64 to match upstream (RHEL-74059)
- consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)
- have gfortran require install-info (RHEL-62417)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.2.1-7.1" date="1738929600">- disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-8" date="1747915200">- libstdc++: Fix -Warray-bounds warning in std::vector&lt;bool&gt; (RHEL-90244)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-9" date="1747915201">- Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
  (RHEL-84679)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-10" date="1748433600">- Put the libstdc++ AS_NEEDED in the right places (RHEL-84679)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-11" date="1756296000">- Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-12" date="1756987200">- Fix glibc32 dependency (RHEL-112209)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-13" date="1767873600">- Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589)</changelog>
</package>
<package pkgid="e1f4ca5ad3d35ba81564b7a899f4338b29910dd94cee63591e930e2ca0f2611e" name="libusbx-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.30" rel="1.el9_8"/>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.30-1" date="1781092800">- Update to upstream version 1.0.30 to include the major bug fixes
- Include the necessary API for fwupd backporting to RHEL9.
  Resolves: RHEL-183213</changelog>
</package>
<package pkgid="355c6b830dbc4a6c80a3c93f256ce900a887841d40ea8babdf48bd7adf770028" name="libusbx-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.30" rel="1.el9_8"/>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.30-1" date="1781092800">- Update to upstream version 1.0.30 to include the major bug fixes
- Include the necessary API for fwupd backporting to RHEL9.
  Resolves: RHEL-183213</changelog>
</package>
<package pkgid="73ebd9705164e56a06f168f2e435e9f055589b8e530848b2b7d38ed75bc75a69" name="libusbx-debugsource" arch="i686">
  <version epoch="0" ver="1.0.30" rel="1.el9_8"/>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.30-1" date="1781092800">- Update to upstream version 1.0.30 to include the major bug fixes
- Include the necessary API for fwupd backporting to RHEL9.
  Resolves: RHEL-183213</changelog>
</package>
<package pkgid="5042817dac3f4d49ff7ed71c359b902773208f2b0434ac1ff52b84bcbb5a78d8" name="libusbx-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.30" rel="1.el9_8"/>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.30-1" date="1781092800">- Update to upstream version 1.0.30 to include the major bug fixes
- Include the necessary API for fwupd backporting to RHEL9.
  Resolves: RHEL-183213</changelog>
</package>
<package pkgid="ad4ddec882e2738231cf6d35eccfb82e52cdb2b4ce1e743c0f951bcdea89607d" name="libuuid-debuginfo" arch="i686">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="cc281fb58547444a817c5e47a99ae97f4dc613594fb5d952a920ffde13091833" name="libuuid-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="43bd27285fa3d75280600d9333bf7f7245eb27b48a4af4e78fc815691ccdf11d" name="libvirt-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="b383b756f46ebd21cefdb98dd2f348da693f1be5df65b4b100accb37117397ae" name="libvirt-daemon-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="e730ca42ae45dfdb17f18238b0e3cde871c71fdbe0105aa0ab88a290fe8db1f1" name="libvirt-daemon-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="2b91ae1a2f6c08dc14594c667d6604001251b1709abdeb422dbda4a8250aad95" name="libvirt-daemon-driver-interface-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="64e205660cf73816c23579b3cc0e83e455bfbfef178b44b041c0bbd4556f1659" name="libvirt-daemon-driver-network-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="bda8a7664f4411aa90e8fb7981110eb4e01fc6f9f7926760143dc2a25a61783d" name="libvirt-daemon-driver-nodedev-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="b6038b3c56f3af6b9463d9cc0b730ba96cb6069ae833349e348c3d20096ae8bf" name="libvirt-daemon-driver-nwfilter-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="9cb0291801a3ee256c518c506df7f72b77724350cf422de3ab4f3056df7f8b95" name="libvirt-daemon-driver-qemu-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="a1b64fb5cd2e8d68df908d13788bf2dc4e4a405f7b2b8d1770d8db6b3a808c4e" name="libvirt-daemon-driver-secret-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="efa4190b85b62920e07fc4bdcec645a2e252046642d2d6d5a971e68e5d4a1c12" name="libvirt-daemon-driver-storage-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="25db6d7f7078476765578e2d0c38136e232c4b819444d280c0e6cb23b293cb43" name="libvirt-daemon-driver-storage-disk-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="fbc67ce4c373f449d58409817ececc30dcd865ce71bbbe2e97f9470cd97604c6" name="libvirt-daemon-driver-storage-iscsi-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="c92cc8030509c5b1d00f73b64ee7ec5a479ab97104a520a20d1b3f8ff5c6d558" name="libvirt-daemon-driver-storage-logical-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="1e74fe76c58a70161f54ac4bac047e86316fe3dbf7664097d6ea2b7d5347abda" name="libvirt-daemon-driver-storage-mpath-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="07b3a2efedac9e969bed6344097392dab892e12701565c7cf01a028866bca0a5" name="libvirt-daemon-driver-storage-rbd-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="37c5aee9b59038215e3d1f6dcb300973e69970cc06c3381ef159fd91b0a04b50" name="libvirt-daemon-driver-storage-scsi-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="3d9006cc8ba8c5aaf08bc2c06ac1ea6bd433ae0d9c2f5fc060311e12d41b2353" name="libvirt-daemon-lock-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="64c84083d1180ba6c4122e4359152c8a2a796e5be0b2b9cb867750d10173004d" name="libvirt-daemon-log-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="587f2630eddf8075989cbb1680423001eb3dccb4baafa23f3ce17949ed515cec" name="libvirt-daemon-plugin-lockd-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="9bea654f984baa1cbc4669e80704492b79548e1efa87225bb877970ae46124da" name="libvirt-daemon-plugin-sanlock-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="4781c4b8aabc5a175085c2f4e1d2acd94874897d8b0553b1416a16f2d9a7b24e" name="libvirt-daemon-proxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="1a7b34b6d436c9b158622eb898520f89da62239b2a14dde10c9ef24d9d4660f3" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="6db7cb88060f78e7f28196024b1a8dee29d1c3e0efc3a672393d24e806b6ea36" name="libvirt-debugsource" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="ad3b47bc7ef3142d43a55e546c04134aebdaf3e271b47ac83113354eea830c0f" name="libvirt-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="587f33d819426420d608f4418edf67b6756e551e1b68e60d1c1dade72daecdea" name="libvirt-nss-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="f71810d205b556180646ebcccbb83673728e4e5d95db983b658b5152c60aa44a" name="libvirt-ssh-proxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="6a72ef3c7e318a6fe4f5c75eebde2101760598f2b09d20c546f65c0fc6004d72" name="libwbclient-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="50bd78b5dfe1c1e52c3c9145990740618e720a1cd3783222fe897b0c4a94d12a" name="libwbclient-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="9b51879ba34fe094445defa7b7396189925ad998fe46dbc3650fe6b0fd50c8c2" name="libwinpr-debuginfo" arch="i686">
  <version epoch="2" ver="2.11.7" rel="7.el9_8.3"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-1" date="1715256000">- Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
  CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
  CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-2" date="1768564800">- Try next DNS entry on connect failure
  Resolves: RHEL-113722</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-3" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363
  Resolves: RHEL-142348, RHEL-142332</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-4" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-148849, RHEL-148891, RHEL-149030</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-5" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151989, RHEL-152216</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-6" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081
  Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032
  Resolves: RHEL-149043, RHEL-149066, RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7" date="1774958400">- Fix use of nsc_process_message
  Resolves: RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.1" date="1776168000">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-163097, RHEL-163113</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.2" date="1777377600">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix growth of preallocated buffers (CVE-2026-27951)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
  Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482
  Resolves: RHEL-161519, RHEL-161085, RHEL-168463</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.3" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159860</changelog>
</package>
<package pkgid="5cdda331bf570c6ef0b71e2523290ad598be1b30041fb0310cd759aec9ceeee2" name="libwinpr-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="7.el9_8.3"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-1" date="1715256000">- Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
  CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
  CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-2" date="1768564800">- Try next DNS entry on connect failure
  Resolves: RHEL-113722</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-3" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363
  Resolves: RHEL-142348, RHEL-142332</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-4" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-148849, RHEL-148891, RHEL-149030</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-5" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151989, RHEL-152216</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-6" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081
  Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032
  Resolves: RHEL-149043, RHEL-149066, RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7" date="1774958400">- Fix use of nsc_process_message
  Resolves: RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.1" date="1776168000">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-163097, RHEL-163113</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.2" date="1777377600">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix growth of preallocated buffers (CVE-2026-27951)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
  Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482
  Resolves: RHEL-161519, RHEL-161085, RHEL-168463</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.3" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159860</changelog>
</package>
<package pkgid="696e0b502eb6be972a4f475406374c1d8dbccdc50c18a9b0ac3f0c3f6aaa7d55" name="libwinpr-debuginfo" arch="i686">
  <version epoch="2" ver="2.11.7" rel="7.el9_8.4"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-2" date="1768564800">- Try next DNS entry on connect failure
  Resolves: RHEL-113722</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-3" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363
  Resolves: RHEL-142348, RHEL-142332</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-4" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-148849, RHEL-148891, RHEL-149030</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-5" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151989, RHEL-152216</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-6" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081
  Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032
  Resolves: RHEL-149043, RHEL-149066, RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7" date="1774958400">- Fix use of nsc_process_message
  Resolves: RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.1" date="1776168000">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-163097, RHEL-163113</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.2" date="1777377600">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix growth of preallocated buffers (CVE-2026-27951)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
  Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482
  Resolves: RHEL-161519, RHEL-161085, RHEL-168463</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.3" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159860</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:2.11.7-7.4" date="1782302400">- Fix incorrect bounds checks in planar codec (CVE-2026-45700)
  Resolves: RHEL-186991</changelog>
</package>
<package pkgid="0182de0ab6bd81b10fdc4fd7ad11d7bc89fec43ddf7bbfc1bd23a415e45cc696" name="libwinpr-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="7.el9_8.4"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-2" date="1768564800">- Try next DNS entry on connect failure
  Resolves: RHEL-113722</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-3" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363
  Resolves: RHEL-142348, RHEL-142332</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-4" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-148849, RHEL-148891, RHEL-149030</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-5" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151989, RHEL-152216</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-6" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081
  Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032
  Resolves: RHEL-149043, RHEL-149066, RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7" date="1774958400">- Fix use of nsc_process_message
  Resolves: RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.1" date="1776168000">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-163097, RHEL-163113</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.2" date="1777377600">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix growth of preallocated buffers (CVE-2026-27951)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
  Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482
  Resolves: RHEL-161519, RHEL-161085, RHEL-168463</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.3" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159860</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:2.11.7-7.4" date="1782302400">- Fix incorrect bounds checks in planar codec (CVE-2026-45700)
  Resolves: RHEL-186991</changelog>
</package>
<package pkgid="315ed526cd1a9bf0a8cb98b06e2203a594c7ed08d691b57d193608b0d168d7d5" name="libwinpr-debuginfo" arch="i686">
  <version epoch="2" ver="2.11.7" rel="7.el9_8.5"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-3" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363
  Resolves: RHEL-142348, RHEL-142332</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-4" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-148849, RHEL-148891, RHEL-149030</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-5" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151989, RHEL-152216</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-6" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081
  Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032
  Resolves: RHEL-149043, RHEL-149066, RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7" date="1774958400">- Fix use of nsc_process_message
  Resolves: RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.1" date="1776168000">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-163097, RHEL-163113</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.2" date="1777377600">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix growth of preallocated buffers (CVE-2026-27951)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
  Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482
  Resolves: RHEL-161519, RHEL-161085, RHEL-168463</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.3" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159860</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:2.11.7-7.4" date="1782302400">- Fix incorrect bounds checks in planar codec (CVE-2026-45700)
  Resolves: RHEL-186991</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:2.11.7-7.5" date="1785931200">- Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299,
  CVE-2026-68580)
  Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605</changelog>
</package>
<package pkgid="7f60f275405f441bf8e3e8c41cbfcea0a8211f3bcedb53a49ce49bcc82aef5a5" name="libwinpr-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.11.7" rel="7.el9_8.5"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-3" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363
  Resolves: RHEL-142348, RHEL-142332</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-4" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-148849, RHEL-148891, RHEL-149030</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-5" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151989, RHEL-152216</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-6" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081
  Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032
  Resolves: RHEL-149043, RHEL-149066, RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7" date="1774958400">- Fix use of nsc_process_message
  Resolves: RHEL-155994</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.1" date="1776168000">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-163097, RHEL-163113</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.2" date="1777377600">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix growth of preallocated buffers (CVE-2026-27951)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
  Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482
  Resolves: RHEL-161519, RHEL-161085, RHEL-168463</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.7-7.3" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159860</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:2.11.7-7.4" date="1782302400">- Fix incorrect bounds checks in planar codec (CVE-2026-45700)
  Resolves: RHEL-186991</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:2.11.7-7.5" date="1785931200">- Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299,
  CVE-2026-68580)
  Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605</changelog>
</package>
<package pkgid="9912b57eff86ad2ceafe30d453422f2550033b96edb60aacd8372b3ea71d3d6a" name="libxml2-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
</package>
<package pkgid="3cad77afdabe612ff138621b960c660bb5ed79e094f31e46c53e4828d49d4a70" name="libxml2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
</package>
<package pkgid="ea05ba8f9cbd4a9a5cbd373b3d9067d57baee378262578e43adca89f3732136c" name="libxml2-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.2"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.2" date="1781611200">- Fix CVE-2025-6170 (RHEL-182016)</changelog>
</package>
<package pkgid="a55e2d36ec4f2b2cec74f67e5d3b421ad570499b1318b66923606ebd1be10e7f" name="libxml2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.2"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.2" date="1781611200">- Fix CVE-2025-6170 (RHEL-182016)</changelog>
</package>
<package pkgid="a12ccb5677a81dcc26e2d5c09c57f44fff428bb5466b562eecdd8c39f01c0be3" name="libxml2-debugsource" arch="i686">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
</package>
<package pkgid="c6375eb7afd9858a24911e092dbc40bae799d6d48457838167b94aa2f5e7b88b" name="libxml2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
</package>
<package pkgid="122a5d1032c086c11ba13593ef88a1a75b91e66e1012ddd0379e269f2788ff65" name="libxml2-debugsource" arch="i686">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.2"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.2" date="1781611200">- Fix CVE-2025-6170 (RHEL-182016)</changelog>
</package>
<package pkgid="a8256fd8ebfde6ce68dd59fff9fe0e1cd12a8927b159794c936c0eed9a7e9800" name="libxml2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.2"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.2" date="1781611200">- Fix CVE-2025-6170 (RHEL-182016)</changelog>
</package>
<package pkgid="40c7c07212791d3dd31c241385aee12b2b00f5a61c8588f4601ccf886179afc3" name="libyang-debuginfo" arch="i686">
  <version epoch="0" ver="2.1.148" rel="1.el9_8.1"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.0.7-3" date="1759492800">- Resolves: RHEL-111202 - Move libyang-devel to CRB</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.1.148-1" date="1762516800">- Resolves: RHEL-126845 - Rebase libyang to version 2.1.148</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.1.148-1.1" date="1779796800">- Fix integer overflow and OOM in LYB parser string/value reading
- Resolves: RHEL-177019</changelog>
</package>
<package pkgid="3747579c58a1b9f2c50bf1a848db117e2126240edd1574300e2156917bf87878" name="libyang-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.148" rel="1.el9_8.1"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.0.7-3" date="1759492800">- Resolves: RHEL-111202 - Move libyang-devel to CRB</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.1.148-1" date="1762516800">- Resolves: RHEL-126845 - Rebase libyang to version 2.1.148</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.1.148-1.1" date="1779796800">- Fix integer overflow and OOM in LYB parser string/value reading
- Resolves: RHEL-177019</changelog>
</package>
<package pkgid="1377391d46d6885effee133e255d7bdea7b15d42fbac6fed64dd7446c80269e5" name="libyang-debugsource" arch="i686">
  <version epoch="0" ver="2.1.148" rel="1.el9_8.1"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.0.7-3" date="1759492800">- Resolves: RHEL-111202 - Move libyang-devel to CRB</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.1.148-1" date="1762516800">- Resolves: RHEL-126845 - Rebase libyang to version 2.1.148</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.1.148-1.1" date="1779796800">- Fix integer overflow and OOM in LYB parser string/value reading
- Resolves: RHEL-177019</changelog>
</package>
<package pkgid="7d1295ede692b947c737d193f29dc9d92f5dca7a25553e25aca6088a3c11c208" name="libyang-debugsource" arch="x86_64">
  <version epoch="0" ver="2.1.148" rel="1.el9_8.1"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.0.7-3" date="1759492800">- Resolves: RHEL-111202 - Move libyang-devel to CRB</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.1.148-1" date="1762516800">- Resolves: RHEL-126845 - Rebase libyang to version 2.1.148</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.1.148-1.1" date="1779796800">- Fix integer overflow and OOM in LYB parser string/value reading
- Resolves: RHEL-177019</changelog>
</package>
<package pkgid="c2d4621310fc370c81f625f46e067a8369dd1987a69f4164fa2b0588ac2719b1" name="linuxptp-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.4" rel="4.el9_8.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2-3" date="1721908800">- rework NMEA delay patch to fix PPS edge rejection (RHEL-39387)
- fix ts2phc to correctly handle leap seconds (RHEL-40216)
- fix ts2phc to reset NMEA parser after RMC message (RHEL-40947)
- add options to configure multicast IP addresses (RHEL-31178)
- add holdover support to ts2phc (RHEL-50216)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-1" date="1733227200">- update to 4.4 (RHEL-58213 RHEL-57040)
- fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60027)
- support static sink clocks in phc2sys automatic mode (RHEL-62864)
- don't require -O option without -a and -w in phc2sys (RHEL-69138)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-2" date="1747224000">- add experimental option for external PPS in ts2phc automatic mode
  (RHEL-72468)
- add command to set external grandmaster properties (RHEL-90585)
- refresh link status on faults (RHEL-56168)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-3" date="1748433600">- fix unicast server to recover after port fault (RHEL-93496)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-4.el9_8.1" date="1782907200">- fix high CPU usage by ptp4l when link is down (RHEL-191410)
- fix phc2sys to not get stuck in static mode (RHEL-187949)</changelog>
</package>
<package pkgid="4dfca8b55b9d05c2daa6930fbcdfe7814e173d59133b87119c2f67211224f59f" name="linuxptp-debugsource" arch="x86_64">
  <version epoch="0" ver="4.4" rel="4.el9_8.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2-3" date="1721908800">- rework NMEA delay patch to fix PPS edge rejection (RHEL-39387)
- fix ts2phc to correctly handle leap seconds (RHEL-40216)
- fix ts2phc to reset NMEA parser after RMC message (RHEL-40947)
- add options to configure multicast IP addresses (RHEL-31178)
- add holdover support to ts2phc (RHEL-50216)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-1" date="1733227200">- update to 4.4 (RHEL-58213 RHEL-57040)
- fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60027)
- support static sink clocks in phc2sys automatic mode (RHEL-62864)
- don't require -O option without -a and -w in phc2sys (RHEL-69138)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-2" date="1747224000">- add experimental option for external PPS in ts2phc automatic mode
  (RHEL-72468)
- add command to set external grandmaster properties (RHEL-90585)
- refresh link status on faults (RHEL-56168)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-3" date="1748433600">- fix unicast server to recover after port fault (RHEL-93496)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-4.el9_8.1" date="1782907200">- fix high CPU usage by ptp4l when link is down (RHEL-191410)
- fix phc2sys to not get stuck in static mode (RHEL-187949)</changelog>
</package>
<package pkgid="48de51f54f172149838c10358cafb46854e8b49fd92b91e0a17a06952f19bb48" name="llvm-libs-debuginfo" arch="i686">
  <version epoch="0" ver="21.1.8" rel="2.el9"/>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-9" date="1750075200">- Use libdir suffix in versioned prefix</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-10" date="1750161600">- Fix llvm-config alternatives handling (rhbz#2361779)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.7-1" date="1750334400">- Update to LLVM 20.1.7</changelog>
  <changelog author="Kashyap Chamarthy &lt;kchamart@redhat.com&gt; - 20.1.7-2" date="1750420800">- Add riscv64 enablement bits; thanks: Songsong Zhang
   (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.8-1" date="1752062400">- Update to LLVM 20.1.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20.1.8-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Murphy &lt;murp@redhat.com&gt; - 20.1.8-3" date="1753704000">- Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
- Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
- Backport fix for build of highway package on ppc64le (rhbz#2383182)</changelog>
  <changelog author="Konrad Kleine &lt;kkleine@redhat.com&gt; - 21.1.7-1" date="1765454400">- Update to 21.1.7</changelog>
  <changelog author="Konrad Kleine &lt;kkleine@redhat.com&gt; - 21.1.8-1" date="1767441600">- Update LLVM Toolset to 21.1.8 [rhel-9]</changelog>
  <changelog author="Konrad Kleine &lt;kkleine@redhat.com&gt; - 21.1.8-2" date="1771416000">- Remove compat libs for LLVM 20</changelog>
</package>
<package pkgid="793ff0975a8d211b8553f4017e93727b3cb59701e101756bbb4aa7c9a14887f5" name="llvm-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="21.1.8" rel="2.el9"/>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-9" date="1750075200">- Use libdir suffix in versioned prefix</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-10" date="1750161600">- Fix llvm-config alternatives handling (rhbz#2361779)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.7-1" date="1750334400">- Update to LLVM 20.1.7</changelog>
  <changelog author="Kashyap Chamarthy &lt;kchamart@redhat.com&gt; - 20.1.7-2" date="1750420800">- Add riscv64 enablement bits; thanks: Songsong Zhang
   (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.8-1" date="1752062400">- Update to LLVM 20.1.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20.1.8-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Murphy &lt;murp@redhat.com&gt; - 20.1.8-3" date="1753704000">- Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
- Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
- Backport fix for build of highway package on ppc64le (rhbz#2383182)</changelog>
  <changelog author="Konrad Kleine &lt;kkleine@redhat.com&gt; - 21.1.7-1" date="1765454400">- Update to 21.1.7</changelog>
  <changelog author="Konrad Kleine &lt;kkleine@redhat.com&gt; - 21.1.8-1" date="1767441600">- Update LLVM Toolset to 21.1.8 [rhel-9]</changelog>
  <changelog author="Konrad Kleine &lt;kkleine@redhat.com&gt; - 21.1.8-2" date="1771416000">- Remove compat libs for LLVM 20</changelog>
</package>
<package pkgid="765153c159806dc51f58f8f8c0b9c20e71550d36e432f22fd52e13afa626c1e1" name="lshw-debuginfo" arch="x86_64">
  <version epoch="0" ver="B.02.20" rel="4.el9"/>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - B.02.20-1" date="1730894400">- Release B.02.20-1 update to upstream latest(9372b680418)</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - B.02.20-2" date="1746446400">- Release B.02.20-2 update to upstream latest(98b74f64e76)</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - B.02.20-3" date="1761134400">- Release B.02.20-3 update to upstream latest(af7c69e1b6e)</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - B.02.20-4" date="1763985600">- Release B.02.20-4 update to upstream latest(209f8306e95)</changelog>
</package>
<package pkgid="f34ecb0d8727f87c3adefd51ed4bc0b7ea9b35437041044c6901e010c2680349" name="lvm2-debuginfo" arch="x86_64">
  <version epoch="9" ver="2.03.33" rel="4.el9.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4.el9_8.1" date="1773057600">- Fix false positive warnings about stray FDs on s390x.</changelog>
</package>
<package pkgid="d8c368fb3f2868fb77eca2e1d3cab3f7ef180ed49eab045f24c15954825d6121" name="lvm2-debugsource" arch="i686">
  <version epoch="9" ver="2.03.33" rel="4.el9.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4.el9_8.1" date="1773057600">- Fix false positive warnings about stray FDs on s390x.</changelog>
</package>
<package pkgid="d846e299e8ab2f853e230c8c6d76768ac50295a0f35a020896b9ffb299789277" name="lvm2-debugsource" arch="x86_64">
  <version epoch="9" ver="2.03.33" rel="4.el9.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4.el9_8.1" date="1773057600">- Fix false positive warnings about stray FDs on s390x.</changelog>
</package>
<package pkgid="81d870a9b0249156ab9816dd9e4321105f17d5b934a1b571b58d3c122dfd4f98" name="lvm2-libs-debuginfo" arch="i686">
  <version epoch="9" ver="2.03.33" rel="4.el9.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4.el9_8.1" date="1773057600">- Fix false positive warnings about stray FDs on s390x.</changelog>
</package>
<package pkgid="6061ff58a35349fb3d7f9a14b653b33fa02c0a53a8bd29de2dc5a3588243a7a1" name="lvm2-libs-debuginfo" arch="x86_64">
  <version epoch="9" ver="2.03.33" rel="4.el9.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4.el9_8.1" date="1773057600">- Fix false positive warnings about stray FDs on s390x.</changelog>
</package>
<package pkgid="aa981735338effd236b27df23adcf7117f39dd172cb950c934a47f923c3e22ef" name="lvm2-lockd-debuginfo" arch="x86_64">
  <version epoch="9" ver="2.03.33" rel="4.el9.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4.el9_8.1" date="1773057600">- Fix false positive warnings about stray FDs on s390x.</changelog>
</package>
<package pkgid="501227874c6d37f2954d7121b4005955e2f8ce5b6e3b57624a35c72cf9cdbf3d" name="mariadb-backup-debuginfo" arch="x86_64">
  <version epoch="3" ver="10.11.15" rel="1.module+el9.7.0+159+ab5ab22d"/>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.9-1" date="1723550400">- Rebase to 10.11.9</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.10-1" date="1731758400">- Rebase to 10.11.10</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 3:10.11.10-4" date="1738411200">- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.11-1" date="1738756800">- Rebase to 10.11.11</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:10.11.13-1" date="1749211200">- Rebase to 10.11.13</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:10.11.14-1" date="1755000000">- Rebase to 10.11.14
- Resolves: RHBZ#2386961</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3:10.11.14-2" date="1761566400">- Revert to soft static allocation of MariaDB and MySQL sysusers.d files</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3:10.11.14-3" date="1761739200">- Bump release for tmpfiles.d change</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3:10.11.14-3" date="1763553600">- Add installation of downstream sysusers.d config file in place of the upstream one</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3:10.11.15-1" date="1764590400">- Rebase to 10.11.15
- Resolves: RHBZ#2417697</changelog>
</package>
<package pkgid="81f50f6f23a1a4ed07a38683315375033e3ed56d8f0d9224a1783d7d13d27a77" name="mariadb-backup-debuginfo" arch="x86_64">
  <version epoch="3" ver="11.8.5" rel="1.module+el9.8.0+164+649cdb65"/>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-1" date="1761048000">- Initial commit on stream-mariadb-11.8-rhel-9.8.0
- Resolves: RHEL-96956</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3:11.8.3-4" date="1761739200">- Bump release for tmpfiles.d change</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3:11.8.3-5" date="1761739201">- Revert to soft static allocation of MariaDB and MySQL sysusers.d files</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-6" date="1763553600">- Bump release for rebuild</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-7" date="1764244800">- Bump release for rebuild</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.5-1" date="1764590400">- Rebase to 11.8.5</changelog>
</package>
<package pkgid="d9093ccaa2666cb91230ce465d740e7398944b05af2a370e8599c534fb3747df" name="mariadb-debuginfo" arch="x86_64">
  <version epoch="3" ver="10.11.15" rel="1.module+el9.7.0+159+ab5ab22d"/>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.9-1" date="1723550400">- Rebase to 10.11.9</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.10-1" date="1731758400">- Rebase to 10.11.10</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 3:10.11.10-4" date="1738411200">- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.11-1" date="1738756800">- Rebase to 10.11.11</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:10.11.13-1" date="1749211200">- Rebase to 10.11.13</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:10.11.14-1" date="1755000000">- Rebase to 10.11.14
- Resolves: RHBZ#2386961</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3:10.11.14-2" date="1761566400">- Revert to soft static allocation of MariaDB and MySQL sysusers.d files</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3:10.11.14-3" date="1761739200">- Bump release for tmpfiles.d change</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3:10.11.14-3" date="1763553600">- Add installation of downstream sysusers.d config file in place of the upstream one</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3:10.11.15-1" date="1764590400">- Rebase to 10.11.15
- Resolves: RHBZ#2417697</changelog>
</package>
<package pkgid="a88f46866bbfc87402b2f8ab6de56a533ee2a9e6b76bd28a1f75cd831f3fa63d" name="mariadb-debuginfo" arch="x86_64">
  <version epoch="3" ver="11.8.5" rel="1.module+el9.8.0+164+649cdb65"/>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-1" date="1761048000">- Initial commit on stream-mariadb-11.8-rhel-9.8.0
- Resolves: RHEL-96956</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3:11.8.3-4" date="1761739200">- Bump release for tmpfiles.d change</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3:11.8.3-5" date="1761739201">- Revert to soft static allocation of MariaDB and MySQL sysusers.d files</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-6" date="1763553600">- Bump release for rebuild</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-7" date="1764244800">- Bump release for rebuild</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.5-1" date="1764590400">- Rebase to 11.8.5</changelog>
</package>
<package pkgid="5ecc9ba1513b4624fdbf8a521617fae652769e81e3a027bb2edb1f5ed124c376" name="mariadb-debugsource" arch="x86_64">
  <version epoch="3" ver="10.11.15" rel="1.module+el9.7.0+159+ab5ab22d"/>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.9-1" date="1723550400">- Rebase to 10.11.9</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.10-1" date="1731758400">- Rebase to 10.11.10</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 3:10.11.10-4" date="1738411200">- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.11-1" date="1738756800">- Rebase to 10.11.11</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:10.11.13-1" date="1749211200">- Rebase to 10.11.13</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:10.11.14-1" date="1755000000">- Rebase to 10.11.14
- Resolves: RHBZ#2386961</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3:10.11.14-2" date="1761566400">- Revert to soft static allocation of MariaDB and MySQL sysusers.d files</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3:10.11.14-3" date="1761739200">- Bump release for tmpfiles.d change</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3:10.11.14-3" date="1763553600">- Add installation of downstream sysusers.d config file in place of the upstream one</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3:10.11.15-1" date="1764590400">- Rebase to 10.11.15
- Resolves: RHBZ#2417697</changelog>
</package>
<package pkgid="dcfb68eda15ae8a45f088267545406a6da728e3a6770d64b2666f62308c48590" name="mariadb-debugsource" arch="x86_64">
  <version epoch="3" ver="11.8.5" rel="1.module+el9.8.0+164+649cdb65"/>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-1" date="1761048000">- Initial commit on stream-mariadb-11.8-rhel-9.8.0
- Resolves: RHEL-96956</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3:11.8.3-4" date="1761739200">- Bump release for tmpfiles.d change</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3:11.8.3-5" date="1761739201">- Revert to soft static allocation of MariaDB and MySQL sysusers.d files</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-6" date="1763553600">- Bump release for rebuild</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-7" date="1764244800">- Bump release for rebuild</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.5-1" date="1764590400">- Rebase to 11.8.5</changelog>
</package>
<package pkgid="34ce3ca00ee5a390e9236f0041c001ee45415198ea00fb8b241179fc05374104" name="mariadb-embedded-debuginfo" arch="x86_64">
  <version epoch="3" ver="10.11.15" rel="1.module+el9.7.0+159+ab5ab22d"/>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.9-1" date="1723550400">- Rebase to 10.11.9</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.10-1" date="1731758400">- Rebase to 10.11.10</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 3:10.11.10-4" date="1738411200">- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.11-1" date="1738756800">- Rebase to 10.11.11</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:10.11.13-1" date="1749211200">- Rebase to 10.11.13</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:10.11.14-1" date="1755000000">- Rebase to 10.11.14
- Resolves: RHBZ#2386961</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3:10.11.14-2" date="1761566400">- Revert to soft static allocation of MariaDB and MySQL sysusers.d files</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3:10.11.14-3" date="1761739200">- Bump release for tmpfiles.d change</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3:10.11.14-3" date="1763553600">- Add installation of downstream sysusers.d config file in place of the upstream one</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3:10.11.15-1" date="1764590400">- Rebase to 10.11.15
- Resolves: RHBZ#2417697</changelog>
</package>
<package pkgid="a82f4ec65844b1f7ddfe658153788654a60126bfe48686cd88598868447608db" name="mariadb-embedded-debuginfo" arch="x86_64">
  <version epoch="3" ver="11.8.5" rel="1.module+el9.8.0+164+649cdb65"/>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-1" date="1761048000">- Initial commit on stream-mariadb-11.8-rhel-9.8.0
- Resolves: RHEL-96956</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3:11.8.3-4" date="1761739200">- Bump release for tmpfiles.d change</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3:11.8.3-5" date="1761739201">- Revert to soft static allocation of MariaDB and MySQL sysusers.d files</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-6" date="1763553600">- Bump release for rebuild</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-7" date="1764244800">- Bump release for rebuild</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.5-1" date="1764590400">- Rebase to 11.8.5</changelog>
</package>
<package pkgid="7e87b0207e8917f6f418018970a4d9a7bf4541ee0a088bebd6462a1e73a16f20" name="mariadb-gssapi-server-debuginfo" arch="x86_64">
  <version epoch="3" ver="10.11.15" rel="1.module+el9.7.0+159+ab5ab22d"/>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.9-1" date="1723550400">- Rebase to 10.11.9</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.10-1" date="1731758400">- Rebase to 10.11.10</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 3:10.11.10-4" date="1738411200">- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.11-1" date="1738756800">- Rebase to 10.11.11</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:10.11.13-1" date="1749211200">- Rebase to 10.11.13</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:10.11.14-1" date="1755000000">- Rebase to 10.11.14
- Resolves: RHBZ#2386961</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3:10.11.14-2" date="1761566400">- Revert to soft static allocation of MariaDB and MySQL sysusers.d files</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3:10.11.14-3" date="1761739200">- Bump release for tmpfiles.d change</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3:10.11.14-3" date="1763553600">- Add installation of downstream sysusers.d config file in place of the upstream one</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3:10.11.15-1" date="1764590400">- Rebase to 10.11.15
- Resolves: RHBZ#2417697</changelog>
</package>
<package pkgid="a9d270663799c9a229e5a9f74a99b194c9178ee985a4869065b8125cbca009bc" name="mariadb-gssapi-server-debuginfo" arch="x86_64">
  <version epoch="3" ver="11.8.5" rel="1.module+el9.8.0+164+649cdb65"/>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-1" date="1761048000">- Initial commit on stream-mariadb-11.8-rhel-9.8.0
- Resolves: RHEL-96956</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3:11.8.3-4" date="1761739200">- Bump release for tmpfiles.d change</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3:11.8.3-5" date="1761739201">- Revert to soft static allocation of MariaDB and MySQL sysusers.d files</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-6" date="1763553600">- Bump release for rebuild</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-7" date="1764244800">- Bump release for rebuild</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.5-1" date="1764590400">- Rebase to 11.8.5</changelog>
</package>
<package pkgid="73928f2ea1dceeb0c9c01669e31bd669626decab33fb46c803b959b222b88db1" name="mariadb-oqgraph-engine-debuginfo" arch="x86_64">
  <version epoch="3" ver="10.11.15" rel="1.module+el9.7.0+159+ab5ab22d"/>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.9-1" date="1723550400">- Rebase to 10.11.9</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.10-1" date="1731758400">- Rebase to 10.11.10</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 3:10.11.10-4" date="1738411200">- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.11-1" date="1738756800">- Rebase to 10.11.11</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:10.11.13-1" date="1749211200">- Rebase to 10.11.13</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:10.11.14-1" date="1755000000">- Rebase to 10.11.14
- Resolves: RHBZ#2386961</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3:10.11.14-2" date="1761566400">- Revert to soft static allocation of MariaDB and MySQL sysusers.d files</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3:10.11.14-3" date="1761739200">- Bump release for tmpfiles.d change</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3:10.11.14-3" date="1763553600">- Add installation of downstream sysusers.d config file in place of the upstream one</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3:10.11.15-1" date="1764590400">- Rebase to 10.11.15
- Resolves: RHBZ#2417697</changelog>
</package>
<package pkgid="68cff696fb85dc557ceeeea006d00b44c66bdf5accc3fd6149112519c26f8a18" name="mariadb-oqgraph-engine-debuginfo" arch="x86_64">
  <version epoch="3" ver="11.8.5" rel="1.module+el9.8.0+164+649cdb65"/>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-1" date="1761048000">- Initial commit on stream-mariadb-11.8-rhel-9.8.0
- Resolves: RHEL-96956</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3:11.8.3-4" date="1761739200">- Bump release for tmpfiles.d change</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3:11.8.3-5" date="1761739201">- Revert to soft static allocation of MariaDB and MySQL sysusers.d files</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-6" date="1763553600">- Bump release for rebuild</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-7" date="1764244800">- Bump release for rebuild</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.5-1" date="1764590400">- Rebase to 11.8.5</changelog>
</package>
<package pkgid="986236bcb5b44d908cedb8677d0ad3804f42b5ef84dee9cace2ee39aebb580b4" name="mariadb-pam-debuginfo" arch="x86_64">
  <version epoch="3" ver="10.11.15" rel="1.module+el9.7.0+159+ab5ab22d"/>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.9-1" date="1723550400">- Rebase to 10.11.9</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.10-1" date="1731758400">- Rebase to 10.11.10</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 3:10.11.10-4" date="1738411200">- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.11-1" date="1738756800">- Rebase to 10.11.11</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:10.11.13-1" date="1749211200">- Rebase to 10.11.13</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:10.11.14-1" date="1755000000">- Rebase to 10.11.14
- Resolves: RHBZ#2386961</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3:10.11.14-2" date="1761566400">- Revert to soft static allocation of MariaDB and MySQL sysusers.d files</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3:10.11.14-3" date="1761739200">- Bump release for tmpfiles.d change</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3:10.11.14-3" date="1763553600">- Add installation of downstream sysusers.d config file in place of the upstream one</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3:10.11.15-1" date="1764590400">- Rebase to 10.11.15
- Resolves: RHBZ#2417697</changelog>
</package>
<package pkgid="0525ff872f28b3b2146f9d49c16547408a8d846469857d68b3e27485854c386f" name="mariadb-pam-debuginfo" arch="x86_64">
  <version epoch="3" ver="11.8.5" rel="1.module+el9.8.0+164+649cdb65"/>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-1" date="1761048000">- Initial commit on stream-mariadb-11.8-rhel-9.8.0
- Resolves: RHEL-96956</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3:11.8.3-4" date="1761739200">- Bump release for tmpfiles.d change</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3:11.8.3-5" date="1761739201">- Revert to soft static allocation of MariaDB and MySQL sysusers.d files</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-6" date="1763553600">- Bump release for rebuild</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-7" date="1764244800">- Bump release for rebuild</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.5-1" date="1764590400">- Rebase to 11.8.5</changelog>
</package>
<package pkgid="1f6aab133277fd261d326ae5764d66144f752352a890da999eb30c7e888c0c6c" name="mariadb-server-debuginfo" arch="x86_64">
  <version epoch="3" ver="10.11.15" rel="1.module+el9.7.0+159+ab5ab22d"/>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.9-1" date="1723550400">- Rebase to 10.11.9</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.10-1" date="1731758400">- Rebase to 10.11.10</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 3:10.11.10-4" date="1738411200">- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.11-1" date="1738756800">- Rebase to 10.11.11</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:10.11.13-1" date="1749211200">- Rebase to 10.11.13</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:10.11.14-1" date="1755000000">- Rebase to 10.11.14
- Resolves: RHBZ#2386961</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3:10.11.14-2" date="1761566400">- Revert to soft static allocation of MariaDB and MySQL sysusers.d files</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3:10.11.14-3" date="1761739200">- Bump release for tmpfiles.d change</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3:10.11.14-3" date="1763553600">- Add installation of downstream sysusers.d config file in place of the upstream one</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3:10.11.15-1" date="1764590400">- Rebase to 10.11.15
- Resolves: RHBZ#2417697</changelog>
</package>
<package pkgid="7abb718ce20bf0045ecdd9dc9782a5cc70ce418cca73a7db5861404957aae609" name="mariadb-server-debuginfo" arch="x86_64">
  <version epoch="3" ver="11.8.5" rel="1.module+el9.8.0+164+649cdb65"/>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-1" date="1761048000">- Initial commit on stream-mariadb-11.8-rhel-9.8.0
- Resolves: RHEL-96956</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3:11.8.3-4" date="1761739200">- Bump release for tmpfiles.d change</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3:11.8.3-5" date="1761739201">- Revert to soft static allocation of MariaDB and MySQL sysusers.d files</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-6" date="1763553600">- Bump release for rebuild</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-7" date="1764244800">- Bump release for rebuild</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.5-1" date="1764590400">- Rebase to 11.8.5</changelog>
</package>
<package pkgid="b9c17af6199745caacdda919fc3b53a7129a5e515a9aaf6f4e09d7854802ee9d" name="mariadb-server-galera-debuginfo" arch="x86_64">
  <version epoch="3" ver="11.8.5" rel="1.module+el9.8.0+164+649cdb65"/>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-1" date="1761048000">- Initial commit on stream-mariadb-11.8-rhel-9.8.0
- Resolves: RHEL-96956</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3:11.8.3-4" date="1761739200">- Bump release for tmpfiles.d change</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3:11.8.3-5" date="1761739201">- Revert to soft static allocation of MariaDB and MySQL sysusers.d files</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-6" date="1763553600">- Bump release for rebuild</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-7" date="1764244800">- Bump release for rebuild</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.5-1" date="1764590400">- Rebase to 11.8.5</changelog>
</package>
<package pkgid="a45adad842443595ea43424c9e7ecd9c1c0685867fcce7ac667a169a2e57078c" name="mariadb-server-utils-debuginfo" arch="x86_64">
  <version epoch="3" ver="10.11.15" rel="1.module+el9.7.0+159+ab5ab22d"/>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.9-1" date="1723550400">- Rebase to 10.11.9</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.10-1" date="1731758400">- Rebase to 10.11.10</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 3:10.11.10-4" date="1738411200">- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.11-1" date="1738756800">- Rebase to 10.11.11</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:10.11.13-1" date="1749211200">- Rebase to 10.11.13</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:10.11.14-1" date="1755000000">- Rebase to 10.11.14
- Resolves: RHBZ#2386961</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3:10.11.14-2" date="1761566400">- Revert to soft static allocation of MariaDB and MySQL sysusers.d files</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3:10.11.14-3" date="1761739200">- Bump release for tmpfiles.d change</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3:10.11.14-3" date="1763553600">- Add installation of downstream sysusers.d config file in place of the upstream one</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3:10.11.15-1" date="1764590400">- Rebase to 10.11.15
- Resolves: RHBZ#2417697</changelog>
</package>
<package pkgid="ef572b263f3a566fdd83454d24feaa3ca83c1b0210ba2fbad48b9287ae097150" name="mariadb-test-debuginfo" arch="x86_64">
  <version epoch="3" ver="10.11.15" rel="1.module+el9.7.0+159+ab5ab22d"/>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.9-1" date="1723550400">- Rebase to 10.11.9</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.10-1" date="1731758400">- Rebase to 10.11.10</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 3:10.11.10-4" date="1738411200">- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 3:10.11.11-1" date="1738756800">- Rebase to 10.11.11</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:10.11.13-1" date="1749211200">- Rebase to 10.11.13</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:10.11.14-1" date="1755000000">- Rebase to 10.11.14
- Resolves: RHBZ#2386961</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3:10.11.14-2" date="1761566400">- Revert to soft static allocation of MariaDB and MySQL sysusers.d files</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3:10.11.14-3" date="1761739200">- Bump release for tmpfiles.d change</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3:10.11.14-3" date="1763553600">- Add installation of downstream sysusers.d config file in place of the upstream one</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3:10.11.15-1" date="1764590400">- Rebase to 10.11.15
- Resolves: RHBZ#2417697</changelog>
</package>
<package pkgid="e196c217ed5f3a85a37f6f4d973ad636f4c8a13c319c9599e632ad1e014627e6" name="mariadb-test-debuginfo" arch="x86_64">
  <version epoch="3" ver="11.8.5" rel="1.module+el9.8.0+164+649cdb65"/>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-1" date="1761048000">- Initial commit on stream-mariadb-11.8-rhel-9.8.0
- Resolves: RHEL-96956</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3:11.8.3-4" date="1761739200">- Bump release for tmpfiles.d change</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3:11.8.3-5" date="1761739201">- Revert to soft static allocation of MariaDB and MySQL sysusers.d files</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-6" date="1763553600">- Bump release for rebuild</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.3-7" date="1764244800">- Bump release for rebuild</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3:11.8.5-1" date="1764590400">- Rebase to 11.8.5</changelog>
</package>
<package pkgid="e04df85495370dd9e15eabb386c3fb92a7a92c2f3c5dbaf342bee3fb1ad5c12b" name="memcached-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6.9" rel="7.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0:1.6.9-7.1" date="1781265600">- Fix timing side-channel in SASL password database authentication
  (CVE-2026-47783)
- Resolves: RHEL-179093</changelog>
</package>
<package pkgid="114a09059bab475b01d728a5fdae5cb1e10d8f98c7f2272bfd7fd91e49e728ab" name="memcached-debugsource" arch="x86_64">
  <version epoch="0" ver="1.6.9" rel="7.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0:1.6.9-7.1" date="1781265600">- Fix timing side-channel in SASL password database authentication
  (CVE-2026-47783)
- Resolves: RHEL-179093</changelog>
</package>
<package pkgid="02702386bf0c12c0c376063c9af49f86562507a5d47ae05ee8aab91bad2c2c79" name="mksh-debuginfo" arch="x86_64">
  <version epoch="0" ver="59c" rel="6.el9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 59c-6" date="1770811200">- fix postun scriptlet (RHEL-129957)</changelog>
</package>
<package pkgid="6b9519393df3bfe47fe9beec2679b31cd99a94d30a1e7e2fec7d36ea6d8b1d59" name="mksh-debugsource" arch="x86_64">
  <version epoch="0" ver="59c" rel="6.el9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 59c-6" date="1770811200">- fix postun scriptlet (RHEL-129957)</changelog>
</package>
<package pkgid="9bb839d92b32022d0a76d3064e2a62f5e802fa870eb47e989fa510f2761b6572" name="mod_http2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.26" rel="6.el9_8.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.0.26-3" date="1720526400">- Resolves: RHEL-45806 - mod_http2: DoS by null pointer in websocket
  over HTTP/2 (CVE-2024-36387)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.0.26-4" date="1737979200">- Resolves: RHEL-76413 - mod_proxy_http2 failures after CVE-2024-38477 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.0.26-5" date="1755691200">- Resolves: RHEL-108706 - CVE-2025-49630 httpd: untrusted input from a client
  causes an assertion to fail in the Apache mod_proxy_http2 module</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.0.26-6" date="1777982400">- Resolves: RHEL-166293 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory
  Increase (CVE-2025-53020)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.0.26-6.1" date="1780660800">- Resolves: RHEL-182417 - mod_http2: HTTP/2: Remote Denial of Service via
  compression bomb and Slowloris-style attack (CVE-2026-49975)</changelog>
</package>
<package pkgid="b829f798c41e14d9b4ed915572c27848678760b3c40f030fcfe77b0e8ebf4d3a" name="mod_http2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.26" rel="6.el9_8.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.0.26-3" date="1720526400">- Resolves: RHEL-45806 - mod_http2: DoS by null pointer in websocket
  over HTTP/2 (CVE-2024-36387)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.0.26-4" date="1737979200">- Resolves: RHEL-76413 - mod_proxy_http2 failures after CVE-2024-38477 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.0.26-5" date="1755691200">- Resolves: RHEL-108706 - CVE-2025-49630 httpd: untrusted input from a client
  causes an assertion to fail in the Apache mod_proxy_http2 module</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.0.26-6" date="1777982400">- Resolves: RHEL-166293 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory
  Increase (CVE-2025-53020)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.0.26-6.1" date="1780660800">- Resolves: RHEL-182417 - mod_http2: HTTP/2: Remote Denial of Service via
  compression bomb and Slowloris-style attack (CVE-2026-49975)</changelog>
</package>
<package pkgid="5543d576d1dfe2bf479d982556300c80ff92437848403c0a072be4f0e2839d0f" name="mod_ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.62" rel="13.el9_8.1"/>
  <changelog author="Joe Orton  &lt;jorton@redhat.com&gt; - 2.4.62-5" date="1749211200">- mod_dav: add dav_get_base_path() API
- Resolves: RHEL-41069</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-6" date="1753790400">- Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-7" date="1755345600">- Resolves: RHEL-99815 - stickysession field does not work when specifying
  it in the query parameter after upgrade to 9.5
- Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99968 - httpd: access control bypass by trusted
  clients is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-8" date="1760356800">- Resolves: RHEL-114501 Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-9" date="1761307200">- Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-10" date="1762430400">- Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix
- mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-11" date="1766145600">- Resolves: RHEL-131827 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-12" date="1767873600">- Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13" date="1770897600">- Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.1" date="1778500800">- Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
</package>
<package pkgid="c8623df45b805ce883894eac03fd7722fbc16ed07a039b1f203ebf9f2531bb9a" name="mod_ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.62" rel="13.el9_8.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-9" date="1761307200">- Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-10" date="1762430400">- Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix
- mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-11" date="1766145600">- Resolves: RHEL-131827 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-12" date="1767873600">- Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13" date="1770897600">- Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.1" date="1778500800">- Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.4.62-13.2" date="1782302400">- Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures
  (CVE-2026-44631)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.4.62-13.3" date="1782475200">- Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling
  vulnerability (CVE-2026-34355)
- Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery
  (CVE-2026-29169)
- Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto
  (CVE-2026-42536)
- Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement
  bug in mod_ssl (CVE-2026-44185)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.4" date="1782820800">- Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-182578 - httpd: incomplete fix
  for CVE-2023-38709 (CVE-2024-42516)
- Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951,
  CVE-2026-44119, CVE-2026-44186</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.5" date="1783598400">- Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix</changelog>
</package>
<package pkgid="650f32e7bcaf37415218d05b66a29d3b35988cbf40e261ab827115bc1f4e79e8" name="mod_lua-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.62" rel="13.el9_8.1"/>
  <changelog author="Joe Orton  &lt;jorton@redhat.com&gt; - 2.4.62-5" date="1749211200">- mod_dav: add dav_get_base_path() API
- Resolves: RHEL-41069</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-6" date="1753790400">- Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-7" date="1755345600">- Resolves: RHEL-99815 - stickysession field does not work when specifying
  it in the query parameter after upgrade to 9.5
- Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99968 - httpd: access control bypass by trusted
  clients is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-8" date="1760356800">- Resolves: RHEL-114501 Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-9" date="1761307200">- Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-10" date="1762430400">- Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix
- mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-11" date="1766145600">- Resolves: RHEL-131827 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-12" date="1767873600">- Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13" date="1770897600">- Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.1" date="1778500800">- Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
</package>
<package pkgid="356083c1af58aa8317920100a1bfdeea072bcd0acd77d75daf572628f08727af" name="mod_lua-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.62" rel="13.el9_8.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-9" date="1761307200">- Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-10" date="1762430400">- Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix
- mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-11" date="1766145600">- Resolves: RHEL-131827 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-12" date="1767873600">- Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13" date="1770897600">- Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.1" date="1778500800">- Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.4.62-13.2" date="1782302400">- Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures
  (CVE-2026-44631)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.4.62-13.3" date="1782475200">- Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling
  vulnerability (CVE-2026-34355)
- Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery
  (CVE-2026-29169)
- Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto
  (CVE-2026-42536)
- Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement
  bug in mod_ssl (CVE-2026-44185)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.4" date="1782820800">- Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-182578 - httpd: incomplete fix
  for CVE-2023-38709 (CVE-2024-42516)
- Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951,
  CVE-2026-44119, CVE-2026-44186</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.5" date="1783598400">- Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix</changelog>
</package>
<package pkgid="a68b9a46518514734f6db35c81214ca52ffb5d8f9f0b2fa55413e8498b64097f" name="mod_md-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.26" rel="2.el9_8.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1:2.4.26-2" date="1767960000">- Resolves: RHEL-134497 - httpd: Apache HTTP Server: mod_md (ACME), unintended
  retry intervals (CVE-2025-55753)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.4.26-2.1" date="1782388800">- Resolves: RHEL-175644 - mod_md: OCSP response limits
  (CVE-2026-29168)</changelog>
</package>
<package pkgid="6d4567b1dbdc57e7a0a8332104df7fec61c50f72231856822e894c333ab120a6" name="mod_md-debugsource" arch="x86_64">
  <version epoch="1" ver="2.4.26" rel="2.el9_8.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1:2.4.26-2" date="1767960000">- Resolves: RHEL-134497 - httpd: Apache HTTP Server: mod_md (ACME), unintended
  retry intervals (CVE-2025-55753)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.4.26-2.1" date="1782388800">- Resolves: RHEL-175644 - mod_md: OCSP response limits
  (CVE-2026-29168)</changelog>
</package>
<package pkgid="faab49e048330a31ee1f57b88f340522e2ba973314c26792d4d59a7102ae9da0" name="mod_proxy_html-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.62" rel="13.el9_8.1"/>
  <changelog author="Joe Orton  &lt;jorton@redhat.com&gt; - 2.4.62-5" date="1749211200">- mod_dav: add dav_get_base_path() API
- Resolves: RHEL-41069</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-6" date="1753790400">- Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-7" date="1755345600">- Resolves: RHEL-99815 - stickysession field does not work when specifying
  it in the query parameter after upgrade to 9.5
- Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99968 - httpd: access control bypass by trusted
  clients is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-8" date="1760356800">- Resolves: RHEL-114501 Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-9" date="1761307200">- Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-10" date="1762430400">- Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix
- mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-11" date="1766145600">- Resolves: RHEL-131827 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-12" date="1767873600">- Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13" date="1770897600">- Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.1" date="1778500800">- Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
</package>
<package pkgid="f087fc253e25716667a1d9616176f6b5ccee479dea07688d38aa2503eed876f3" name="mod_proxy_html-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.62" rel="13.el9_8.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-9" date="1761307200">- Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-10" date="1762430400">- Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix
- mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-11" date="1766145600">- Resolves: RHEL-131827 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-12" date="1767873600">- Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13" date="1770897600">- Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.1" date="1778500800">- Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.4.62-13.2" date="1782302400">- Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures
  (CVE-2026-44631)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.4.62-13.3" date="1782475200">- Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling
  vulnerability (CVE-2026-34355)
- Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery
  (CVE-2026-29169)
- Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto
  (CVE-2026-42536)
- Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement
  bug in mod_ssl (CVE-2026-44185)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.4" date="1782820800">- Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-182578 - httpd: incomplete fix
  for CVE-2023-38709 (CVE-2024-42516)
- Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951,
  CVE-2026-44119, CVE-2026-44186</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.5" date="1783598400">- Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix</changelog>
</package>
<package pkgid="7a7af44383db5611d690f884981c61c3460d2200e61e2069b6c13334762a1d81" name="mod_session-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.62" rel="13.el9_8.1"/>
  <changelog author="Joe Orton  &lt;jorton@redhat.com&gt; - 2.4.62-5" date="1749211200">- mod_dav: add dav_get_base_path() API
- Resolves: RHEL-41069</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-6" date="1753790400">- Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-7" date="1755345600">- Resolves: RHEL-99815 - stickysession field does not work when specifying
  it in the query parameter after upgrade to 9.5
- Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99968 - httpd: access control bypass by trusted
  clients is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-8" date="1760356800">- Resolves: RHEL-114501 Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-9" date="1761307200">- Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-10" date="1762430400">- Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix
- mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-11" date="1766145600">- Resolves: RHEL-131827 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-12" date="1767873600">- Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13" date="1770897600">- Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.1" date="1778500800">- Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
</package>
<package pkgid="2ff63ba728d24f38ddbfbdfef55a6040da55424e48253dbb86963c550755eb7d" name="mod_session-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.62" rel="13.el9_8.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-9" date="1761307200">- Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-10" date="1762430400">- Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix
- mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-11" date="1766145600">- Resolves: RHEL-131827 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-12" date="1767873600">- Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13" date="1770897600">- Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.1" date="1778500800">- Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.4.62-13.2" date="1782302400">- Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures
  (CVE-2026-44631)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.4.62-13.3" date="1782475200">- Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling
  vulnerability (CVE-2026-34355)
- Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery
  (CVE-2026-29169)
- Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto
  (CVE-2026-42536)
- Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement
  bug in mod_ssl (CVE-2026-44185)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.4" date="1782820800">- Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-182578 - httpd: incomplete fix
  for CVE-2023-38709 (CVE-2024-42516)
- Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951,
  CVE-2026-44119, CVE-2026-44186</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.5" date="1783598400">- Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix</changelog>
</package>
<package pkgid="351f11544e4631f9f6e8344a826c466237bb64b1428c9ef63766b480ef19382d" name="mod_ssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.62" rel="13.el9_8.1"/>
  <changelog author="Joe Orton  &lt;jorton@redhat.com&gt; - 2.4.62-5" date="1749211200">- mod_dav: add dav_get_base_path() API
- Resolves: RHEL-41069</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-6" date="1753790400">- Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-7" date="1755345600">- Resolves: RHEL-99815 - stickysession field does not work when specifying
  it in the query parameter after upgrade to 9.5
- Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99968 - httpd: access control bypass by trusted
  clients is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-8" date="1760356800">- Resolves: RHEL-114501 Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-9" date="1761307200">- Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-10" date="1762430400">- Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix
- mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-11" date="1766145600">- Resolves: RHEL-131827 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-12" date="1767873600">- Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13" date="1770897600">- Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.1" date="1778500800">- Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
</package>
<package pkgid="60a5b5e504838528018cc863b20ea4c1fd18297c5eb00805d783be683a9914d2" name="mod_ssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.4.62" rel="13.el9_8.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-9" date="1761307200">- Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-10" date="1762430400">- Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix
- mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-11" date="1766145600">- Resolves: RHEL-131827 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-12" date="1767873600">- Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13" date="1770897600">- Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.1" date="1778500800">- Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.4.62-13.2" date="1782302400">- Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures
  (CVE-2026-44631)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.4.62-13.3" date="1782475200">- Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling
  vulnerability (CVE-2026-34355)
- Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery
  (CVE-2026-29169)
- Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto
  (CVE-2026-42536)
- Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement
  bug in mod_ssl (CVE-2026-44185)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.4" date="1782820800">- Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-182578 - httpd: incomplete fix
  for CVE-2023-38709 (CVE-2024-42516)
- Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951,
  CVE-2026-44119, CVE-2026-44186</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.62-13.5" date="1783598400">- Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix</changelog>
</package>
<package pkgid="37e0fdc912477c92afc7c5c24934a168275ba44309c2945762d38a4b22d11dfb" name="mokutil-debuginfo" arch="x86_64">
  <version epoch="2" ver="0.7.2" rel="4.el9"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 0.7.2-1" date="1745841600">- Bump version to 0.7.2 upstream tag
- Resolves: #RHEL-88741</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 0.7.2-2" date="1747051200">- Rebase several patches from upstream which:
  - Introduce --is-sb-enabled parameter and better return codes
  - Remove unused int_to_b64()
  - Show help on unsupported systems
- Resolves: #RHEL-90837</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 0.7.2-3" date="1751025600">- Return zero in case --test-key is enrolled
- Resolves: #RHEL-90837</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 0.7.2-4" date="1765281600">- Bump release
- Resolves: #RHEL-90837</changelog>
</package>
<package pkgid="819abcc3e9d4a010412d5b476816ad4f20cefd24dd3396b88d31272417c3c2f3" name="mokutil-debugsource" arch="x86_64">
  <version epoch="2" ver="0.7.2" rel="4.el9"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 0.7.2-1" date="1745841600">- Bump version to 0.7.2 upstream tag
- Resolves: #RHEL-88741</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 0.7.2-2" date="1747051200">- Rebase several patches from upstream which:
  - Introduce --is-sb-enabled parameter and better return codes
  - Remove unused int_to_b64()
  - Show help on unsupported systems
- Resolves: #RHEL-90837</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 0.7.2-3" date="1751025600">- Return zero in case --test-key is enrolled
- Resolves: #RHEL-90837</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 0.7.2-4" date="1765281600">- Bump release
- Resolves: #RHEL-90837</changelog>
</package>
<package pkgid="fd557193f1689f75b3c68fd3e2dbce1decbf5b8252e51aef22e699c60e78b3dd" name="mpfr-debuginfo" arch="i686">
  <version epoch="0" ver="4.1.0" rel="10.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 4.1.0-8" date="1765368000">- fix use of uninitialized value in sin_cos (RHEL-35392)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 4.1.0-9" date="1769515200">- add /usr/share/doc/mpfr ownership (RHEL-36690)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 4.1.0-10" date="1770638400">- add /usr/share/doc/mpfr ownership to the doc subpackage as well (RHEL-36690)</changelog>
</package>
<package pkgid="6c86be8805b1d02e20be7e2ea1a50d3e12e74cb72641cf664c59b76fd9c5a5ce" name="mpfr-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.1.0" rel="10.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 4.1.0-8" date="1765368000">- fix use of uninitialized value in sin_cos (RHEL-35392)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 4.1.0-9" date="1769515200">- add /usr/share/doc/mpfr ownership (RHEL-36690)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 4.1.0-10" date="1770638400">- add /usr/share/doc/mpfr ownership to the doc subpackage as well (RHEL-36690)</changelog>
</package>
<package pkgid="60d78be695949f37f2a1abff13ca9a61fb21733d6e83dcbe9df77b6d1fe2abcb" name="mutter-debuginfo" arch="i686">
  <version epoch="0" ver="40.9" rel="33.el9_8"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 40.9-24" date="1738065600">- Fix stuck modifier keys
  Resolves: RHEL-21286</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 40.9-25" date="1745496000">- Do not disable touchscreen on DPMS off if touch-mode is disabled
  Resolves: RHEL-31742</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 40.9-26" date="1747051200">- Fix polyinstantiation preventing Xwayland to start
  Resolves: RHEL-90588</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-27" date="1751025600">- Backport fixes for cogl OpenGL conformance
  Resolves: RHEL-4521</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 40.9-28" date="1751371200">- Backport fix for screen not refreshing properly
  Resolves: RHEL-89352</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-29" date="1758715200">- Fix input latency regression
  Resolves: RHEL-117098</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-30" date="1762776000">- Fix handling of more WM_HINTS window icon types
  Resolves: RHEL-70872</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 40.9-31" date="1763640000">- Backport linux-dmabuf v4 support to restore hardware acceleration
  in Xwayland 24.1 with Mesa 25.2
  Resolves: RHEL-129832</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-32" date="1764244800">- Sanity check input on workspace activation API
  Related: RHEL-68825</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-33" date="1780401600">- Don't unminimize mapped windows
  Resolves: RHEL-180797</changelog>
</package>
<package pkgid="76d2dc8511552785c88dbe5b62f6585da2826a43ff90051f15a8bf03b26cfa59" name="mutter-debuginfo" arch="x86_64">
  <version epoch="0" ver="40.9" rel="33.el9_8"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 40.9-24" date="1738065600">- Fix stuck modifier keys
  Resolves: RHEL-21286</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 40.9-25" date="1745496000">- Do not disable touchscreen on DPMS off if touch-mode is disabled
  Resolves: RHEL-31742</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 40.9-26" date="1747051200">- Fix polyinstantiation preventing Xwayland to start
  Resolves: RHEL-90588</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-27" date="1751025600">- Backport fixes for cogl OpenGL conformance
  Resolves: RHEL-4521</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 40.9-28" date="1751371200">- Backport fix for screen not refreshing properly
  Resolves: RHEL-89352</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-29" date="1758715200">- Fix input latency regression
  Resolves: RHEL-117098</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-30" date="1762776000">- Fix handling of more WM_HINTS window icon types
  Resolves: RHEL-70872</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 40.9-31" date="1763640000">- Backport linux-dmabuf v4 support to restore hardware acceleration
  in Xwayland 24.1 with Mesa 25.2
  Resolves: RHEL-129832</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-32" date="1764244800">- Sanity check input on workspace activation API
  Related: RHEL-68825</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-33" date="1780401600">- Don't unminimize mapped windows
  Resolves: RHEL-180797</changelog>
</package>
<package pkgid="82fdbe16624fe77e1603c7572ba3d970bce5d613b52d60f21adc33da50ed41de" name="mutter-debugsource" arch="i686">
  <version epoch="0" ver="40.9" rel="33.el9_8"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 40.9-24" date="1738065600">- Fix stuck modifier keys
  Resolves: RHEL-21286</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 40.9-25" date="1745496000">- Do not disable touchscreen on DPMS off if touch-mode is disabled
  Resolves: RHEL-31742</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 40.9-26" date="1747051200">- Fix polyinstantiation preventing Xwayland to start
  Resolves: RHEL-90588</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-27" date="1751025600">- Backport fixes for cogl OpenGL conformance
  Resolves: RHEL-4521</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 40.9-28" date="1751371200">- Backport fix for screen not refreshing properly
  Resolves: RHEL-89352</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-29" date="1758715200">- Fix input latency regression
  Resolves: RHEL-117098</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-30" date="1762776000">- Fix handling of more WM_HINTS window icon types
  Resolves: RHEL-70872</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 40.9-31" date="1763640000">- Backport linux-dmabuf v4 support to restore hardware acceleration
  in Xwayland 24.1 with Mesa 25.2
  Resolves: RHEL-129832</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-32" date="1764244800">- Sanity check input on workspace activation API
  Related: RHEL-68825</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-33" date="1780401600">- Don't unminimize mapped windows
  Resolves: RHEL-180797</changelog>
</package>
<package pkgid="134dd4142e6b145258394574e8c77524fd0862ddf25046f01cf2a5dc2a187801" name="mutter-debugsource" arch="x86_64">
  <version epoch="0" ver="40.9" rel="33.el9_8"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 40.9-24" date="1738065600">- Fix stuck modifier keys
  Resolves: RHEL-21286</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 40.9-25" date="1745496000">- Do not disable touchscreen on DPMS off if touch-mode is disabled
  Resolves: RHEL-31742</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 40.9-26" date="1747051200">- Fix polyinstantiation preventing Xwayland to start
  Resolves: RHEL-90588</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-27" date="1751025600">- Backport fixes for cogl OpenGL conformance
  Resolves: RHEL-4521</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 40.9-28" date="1751371200">- Backport fix for screen not refreshing properly
  Resolves: RHEL-89352</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-29" date="1758715200">- Fix input latency regression
  Resolves: RHEL-117098</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-30" date="1762776000">- Fix handling of more WM_HINTS window icon types
  Resolves: RHEL-70872</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 40.9-31" date="1763640000">- Backport linux-dmabuf v4 support to restore hardware acceleration
  in Xwayland 24.1 with Mesa 25.2
  Resolves: RHEL-129832</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-32" date="1764244800">- Sanity check input on workspace activation API
  Related: RHEL-68825</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-33" date="1780401600">- Don't unminimize mapped windows
  Resolves: RHEL-180797</changelog>
</package>
<package pkgid="826714cbfb5ecd757f3a60204def7de6f0dc1d6a26f2b078069ba5a679151397" name="nfs-utils-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.5.4" rel="42.el9"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-33" date="1739620800">- Add nfs.conf to nfsv4-client-utils package (RHEL-72013)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-34" date="1739707200">- mountstats/nfsiostat: bugfixes for iostat (RHEL-72243)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-35" date="1745323200">- nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
- nfsd: allow more than 64 backlogged connections (RHEL-87752)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-36" date="1745582400">- mountstats: verify that old and new types are the same (RHEL-88553)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-37" date="1745668800">- gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
- gssd: do not use krb5_cc_initialize (RHEL-85412)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-38" date="1749729600">- ensure services are stopped when nfs-utils is uninstalled (RHEL-88422)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-39" date="1758196800">- Fix dependency definition in rpc-statd.service (RHEL-116079)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-40" date="1765195200">- nfsrahead: modify get_device_info logic (RHEL-134397)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-41" date="1767960000">- gssd: protect kerberos ticket cache access (RHEL-138462)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-42" date="1772798400">- Replace statfs64 with statfs (RHEL-127105)
- NFS export symlink vulnerability fix (RHEL-127105)
- mountd: Minor refactor of get_rootfh() (RHEL-127105)
- mountd: Separate lookup of the exported directory and the mount path (RHEL-127105)
- support: Add a mini-library to extract and apply RPC credentials (RHEL-127105)
- Fix access checks when mounting subdirectories in NFSv3 (RHEL-127105)
- Add requires for selinux-policy (RHEL-127105)
  Resolves: CVE-2025-12801</changelog>
</package>
<package pkgid="043623ba5490a9738ddaa9a9cb214ee95bf84f2aa9f3a54f62bbf23a92c8627f" name="nftables-debuginfo" arch="i686">
  <version epoch="1" ver="1.0.9" rel="7.el9_8"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-2.el9]" date="1718366400">- Add support for table's persist flag (Phil Sutter) [RHEL-32122]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-3.el9]" date="1719921600">- cache: Always set NFT_CACHE_TERSE for list cmd with --terse (Phil Sutter) [RHEL-45633]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-4.el9]" date="1745409600">- parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
- json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-5.el9]" date="1760616000">- tests: py: missing json output in never merge across non-expression statements (Phil Sutter) [RHEL-114095]
- tests: py: add missing json.output data (Phil Sutter) [RHEL-114095]
- tests: py: remove huge-limit test cases (Phil Sutter) [RHEL-114095]
- datatype: rt_symbol_table_init() to search for iproute2 configs (Phil Sutter) [RHEL-114095]
- tests: shell: connect chains to hook point (Phil Sutter) [RHEL-114095]
- tests: shell: Fix sets/reset_command_0 for current kernels (Phil Sutter) [RHEL-114095]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-6.el9]" date="1764158400">- Revert doc/ part of "exthdr: add boolean DCCP option matching" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "meta: introduce meta broute support" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "src: add tcp option reset support" (Phil Sutter) [RHEL-126817]
- spec: Update expected test suite results (Phil Sutter) [RHEL-126817]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-7.el9]" date="1773835200">- src: fix reset element support for interval set type (Phil Sutter) [RHEL-153461]
- src: netlink: fix crash when ops doesn't support udata (Phil Sutter) [RHEL-153461]</changelog>
</package>
<package pkgid="92443f0a0ff420afe9d8f9e662206a752fafabcf7d1d0d04ba3d582506ab78ba" name="nftables-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.0.9" rel="7.el9_8"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-2.el9]" date="1718366400">- Add support for table's persist flag (Phil Sutter) [RHEL-32122]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-3.el9]" date="1719921600">- cache: Always set NFT_CACHE_TERSE for list cmd with --terse (Phil Sutter) [RHEL-45633]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-4.el9]" date="1745409600">- parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
- json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-5.el9]" date="1760616000">- tests: py: missing json output in never merge across non-expression statements (Phil Sutter) [RHEL-114095]
- tests: py: add missing json.output data (Phil Sutter) [RHEL-114095]
- tests: py: remove huge-limit test cases (Phil Sutter) [RHEL-114095]
- datatype: rt_symbol_table_init() to search for iproute2 configs (Phil Sutter) [RHEL-114095]
- tests: shell: connect chains to hook point (Phil Sutter) [RHEL-114095]
- tests: shell: Fix sets/reset_command_0 for current kernels (Phil Sutter) [RHEL-114095]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-6.el9]" date="1764158400">- Revert doc/ part of "exthdr: add boolean DCCP option matching" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "meta: introduce meta broute support" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "src: add tcp option reset support" (Phil Sutter) [RHEL-126817]
- spec: Update expected test suite results (Phil Sutter) [RHEL-126817]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-7.el9]" date="1773835200">- src: fix reset element support for interval set type (Phil Sutter) [RHEL-153461]
- src: netlink: fix crash when ops doesn't support udata (Phil Sutter) [RHEL-153461]</changelog>
</package>
<package pkgid="ab9cf5ccc0ac846d4b1c6443f786e28a625b511002dc41c21f17706a65e7e749" name="nftables-debugsource" arch="i686">
  <version epoch="1" ver="1.0.9" rel="7.el9_8"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-2.el9]" date="1718366400">- Add support for table's persist flag (Phil Sutter) [RHEL-32122]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-3.el9]" date="1719921600">- cache: Always set NFT_CACHE_TERSE for list cmd with --terse (Phil Sutter) [RHEL-45633]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-4.el9]" date="1745409600">- parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
- json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-5.el9]" date="1760616000">- tests: py: missing json output in never merge across non-expression statements (Phil Sutter) [RHEL-114095]
- tests: py: add missing json.output data (Phil Sutter) [RHEL-114095]
- tests: py: remove huge-limit test cases (Phil Sutter) [RHEL-114095]
- datatype: rt_symbol_table_init() to search for iproute2 configs (Phil Sutter) [RHEL-114095]
- tests: shell: connect chains to hook point (Phil Sutter) [RHEL-114095]
- tests: shell: Fix sets/reset_command_0 for current kernels (Phil Sutter) [RHEL-114095]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-6.el9]" date="1764158400">- Revert doc/ part of "exthdr: add boolean DCCP option matching" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "meta: introduce meta broute support" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "src: add tcp option reset support" (Phil Sutter) [RHEL-126817]
- spec: Update expected test suite results (Phil Sutter) [RHEL-126817]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-7.el9]" date="1773835200">- src: fix reset element support for interval set type (Phil Sutter) [RHEL-153461]
- src: netlink: fix crash when ops doesn't support udata (Phil Sutter) [RHEL-153461]</changelog>
</package>
<package pkgid="03a5bacdf39be7ec7bc797fd613c2a6e5c36be0de702199d3ec3ee26a9cd6db2" name="nftables-debugsource" arch="x86_64">
  <version epoch="1" ver="1.0.9" rel="7.el9_8"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-2.el9]" date="1718366400">- Add support for table's persist flag (Phil Sutter) [RHEL-32122]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-3.el9]" date="1719921600">- cache: Always set NFT_CACHE_TERSE for list cmd with --terse (Phil Sutter) [RHEL-45633]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-4.el9]" date="1745409600">- parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
- json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-5.el9]" date="1760616000">- tests: py: missing json output in never merge across non-expression statements (Phil Sutter) [RHEL-114095]
- tests: py: add missing json.output data (Phil Sutter) [RHEL-114095]
- tests: py: remove huge-limit test cases (Phil Sutter) [RHEL-114095]
- datatype: rt_symbol_table_init() to search for iproute2 configs (Phil Sutter) [RHEL-114095]
- tests: shell: connect chains to hook point (Phil Sutter) [RHEL-114095]
- tests: shell: Fix sets/reset_command_0 for current kernels (Phil Sutter) [RHEL-114095]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-6.el9]" date="1764158400">- Revert doc/ part of "exthdr: add boolean DCCP option matching" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "meta: introduce meta broute support" (Phil Sutter) [RHEL-126817]
- Revert doc/ part of "src: add tcp option reset support" (Phil Sutter) [RHEL-126817]
- spec: Update expected test suite results (Phil Sutter) [RHEL-126817]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.0.9-7.el9]" date="1773835200">- src: fix reset element support for interval set type (Phil Sutter) [RHEL-153461]
- src: netlink: fix crash when ops doesn't support udata (Phil Sutter) [RHEL-153461]</changelog>
</package>
<package pkgid="d6e9368452dd0d4b72fb0da034f4fcedcc128b66b8394d48d24b2f68c8cbf442" name="nghttp2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.43.0" rel="6.el9_7.1"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6" date="1712750400">- fix CONTINUATION frames DoS (CVE-2024-28182, CVE-2024-27316)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.1" date="1775044800">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
</package>
<package pkgid="c7ad3bc3ec00469eb1c65ff83061d83f2813830ad9d9c578eabee7202dd456fc" name="nghttp2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.43.0" rel="6.el9_8.2"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.1" date="1775044800">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.2" date="1786536000">- fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)</changelog>
</package>
<package pkgid="6e2042f9021da543d9c3b1d29a7bf8a7db3e423be13ef0a4898119e31f7d64e4" name="nghttp2-debugsource" arch="i686">
  <version epoch="0" ver="1.43.0" rel="6.el9_7.1"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6" date="1712750400">- fix CONTINUATION frames DoS (CVE-2024-28182, CVE-2024-27316)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.1" date="1775044800">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
</package>
<package pkgid="12bae6769bee602d9620e46bacec04f77cb360e23ef1f4d4cd4443eb2d170797" name="nghttp2-debugsource" arch="x86_64">
  <version epoch="0" ver="1.43.0" rel="6.el9_7.1"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6" date="1712750400">- fix CONTINUATION frames DoS (CVE-2024-28182, CVE-2024-27316)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.1" date="1775044800">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
</package>
<package pkgid="8bb35cf47b7348c8ed9065e6a595c2c13c4a301335dc8df8b2a38c240db3acbd" name="nghttp2-debugsource" arch="i686">
  <version epoch="0" ver="1.43.0" rel="6.el9_8.2"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.1" date="1775044800">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.2" date="1786536000">- fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)</changelog>
</package>
<package pkgid="e5ecd13032b0e12132ae51859516cfa5c53e2387617cc6c9c17e2f2f2d467efc" name="nghttp2-debugsource" arch="x86_64">
  <version epoch="0" ver="1.43.0" rel="6.el9_8.2"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.1" date="1775044800">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.43.0-6.2" date="1786536000">- fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)</changelog>
</package>
<package pkgid="b57d95f7064f0ea1ba559277f7cd9d0199bc439ed062001956ba8b8dd294d706" name="nmstate-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.60" rel="1.el9_8"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.48-1" date="1752321600">- Upgrade to 2.2.48
- Validate OVN bridge mapping. RHEL-85787
- Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784
- Support matching by PCI adress. RHEL-88993
- Apply dispatch changes first. RHEL-101742
- Fix SRIOV VF reference. RHEL-93180</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 2.2.49-1" date="1754395200">- Upgrade to 2.2.49
- Ignore desired MAC for bonds with fail_over_mac. RHEL-107526
- Fix setting DNS only with search or option. RHEL-104797</changelog>
  <changelog author="Mingyu Shi &lt;mshi@redhat.com&gt; - 2.2.50-1" date="1756728000">- Upgrade to 2.2.50
- Support MAC referring for VLAN in gen_conf. RHEL-110369
- Introduce state: ignore for route. RHEL-107130
- Support PCI address matching in gen_conf. RHEL-110369
- Support MacSec interface in gen_conf. RHEL-110369</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.52-1" date="1758024000">- Upgrade to 2.2.52
- Support interface altnative name. RHEL-110781</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.54-1" date="1760961600">- Upgrade to 2.2.54.
- Automatically set HSR port MAC address. RHEL-122171
- Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.56-1" date="1764072000">- Upgrade to 2.2.56
- Allow using VRF name to specify route table. RHEL-123541
- Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052
- Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731
- Support rightca ipsec option. RHEL-123542</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.57-1" date="1765281600">- Upgrade to 2.2.57
- Add libreswan leftprotoport and rightprotoport support. (RHEL-130912)</changelog>
  <changelog author="Mingyu Shi &lt;mshi@redhat.com&gt; - 2.2.58-1" date="1770811200">- Upgrade to 2.2.58
- vrf: Handle ignore interface when verifying desired state. RHEL-141606
- alt-name: Remove alt-names when interface marked as absent. RHEL-141602
- hsr: Automatically disable IP on hsr port. RHEL-141609
- hsr: add support for configuring "interlink" property. RHEL-141608
- Support referring interface name using its alternative name. RHEL-141601</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 2.2.59-1" date="1772712000">- Upgrade to 2.2.59
- Add support for lock-mtu option. RHEL-151933.</changelog>
  <changelog author="J&#xE1;n V&#xE1;clav &lt;jvaclav@redhat.com&gt; - 2.2.60-1" date="1778068800">- Upgrade to 2.2.60
- ipv4: Add new parameter prefix-route-metric RHEL-170695</changelog>
</package>
<package pkgid="7f6a0b2224ad1caaa3166f7d81ac5bc947537d4c5d197d3815616ecfaa875aaa" name="nmstate-debugsource" arch="i686">
  <version epoch="0" ver="2.2.60" rel="1.el9_8"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.48-1" date="1752321600">- Upgrade to 2.2.48
- Validate OVN bridge mapping. RHEL-85787
- Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784
- Support matching by PCI adress. RHEL-88993
- Apply dispatch changes first. RHEL-101742
- Fix SRIOV VF reference. RHEL-93180</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 2.2.49-1" date="1754395200">- Upgrade to 2.2.49
- Ignore desired MAC for bonds with fail_over_mac. RHEL-107526
- Fix setting DNS only with search or option. RHEL-104797</changelog>
  <changelog author="Mingyu Shi &lt;mshi@redhat.com&gt; - 2.2.50-1" date="1756728000">- Upgrade to 2.2.50
- Support MAC referring for VLAN in gen_conf. RHEL-110369
- Introduce state: ignore for route. RHEL-107130
- Support PCI address matching in gen_conf. RHEL-110369
- Support MacSec interface in gen_conf. RHEL-110369</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.52-1" date="1758024000">- Upgrade to 2.2.52
- Support interface altnative name. RHEL-110781</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.54-1" date="1760961600">- Upgrade to 2.2.54.
- Automatically set HSR port MAC address. RHEL-122171
- Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.56-1" date="1764072000">- Upgrade to 2.2.56
- Allow using VRF name to specify route table. RHEL-123541
- Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052
- Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731
- Support rightca ipsec option. RHEL-123542</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.57-1" date="1765281600">- Upgrade to 2.2.57
- Add libreswan leftprotoport and rightprotoport support. (RHEL-130912)</changelog>
  <changelog author="Mingyu Shi &lt;mshi@redhat.com&gt; - 2.2.58-1" date="1770811200">- Upgrade to 2.2.58
- vrf: Handle ignore interface when verifying desired state. RHEL-141606
- alt-name: Remove alt-names when interface marked as absent. RHEL-141602
- hsr: Automatically disable IP on hsr port. RHEL-141609
- hsr: add support for configuring "interlink" property. RHEL-141608
- Support referring interface name using its alternative name. RHEL-141601</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 2.2.59-1" date="1772712000">- Upgrade to 2.2.59
- Add support for lock-mtu option. RHEL-151933.</changelog>
  <changelog author="J&#xE1;n V&#xE1;clav &lt;jvaclav@redhat.com&gt; - 2.2.60-1" date="1778068800">- Upgrade to 2.2.60
- ipv4: Add new parameter prefix-route-metric RHEL-170695</changelog>
</package>
<package pkgid="e73a23dd35cbd579bfd9b32ef2fc09812cc0b232a9e3613d178b79bd147c5641" name="nmstate-debugsource" arch="x86_64">
  <version epoch="0" ver="2.2.60" rel="1.el9_8"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.48-1" date="1752321600">- Upgrade to 2.2.48
- Validate OVN bridge mapping. RHEL-85787
- Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784
- Support matching by PCI adress. RHEL-88993
- Apply dispatch changes first. RHEL-101742
- Fix SRIOV VF reference. RHEL-93180</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 2.2.49-1" date="1754395200">- Upgrade to 2.2.49
- Ignore desired MAC for bonds with fail_over_mac. RHEL-107526
- Fix setting DNS only with search or option. RHEL-104797</changelog>
  <changelog author="Mingyu Shi &lt;mshi@redhat.com&gt; - 2.2.50-1" date="1756728000">- Upgrade to 2.2.50
- Support MAC referring for VLAN in gen_conf. RHEL-110369
- Introduce state: ignore for route. RHEL-107130
- Support PCI address matching in gen_conf. RHEL-110369
- Support MacSec interface in gen_conf. RHEL-110369</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.52-1" date="1758024000">- Upgrade to 2.2.52
- Support interface altnative name. RHEL-110781</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.54-1" date="1760961600">- Upgrade to 2.2.54.
- Automatically set HSR port MAC address. RHEL-122171
- Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.56-1" date="1764072000">- Upgrade to 2.2.56
- Allow using VRF name to specify route table. RHEL-123541
- Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052
- Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731
- Support rightca ipsec option. RHEL-123542</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.57-1" date="1765281600">- Upgrade to 2.2.57
- Add libreswan leftprotoport and rightprotoport support. (RHEL-130912)</changelog>
  <changelog author="Mingyu Shi &lt;mshi@redhat.com&gt; - 2.2.58-1" date="1770811200">- Upgrade to 2.2.58
- vrf: Handle ignore interface when verifying desired state. RHEL-141606
- alt-name: Remove alt-names when interface marked as absent. RHEL-141602
- hsr: Automatically disable IP on hsr port. RHEL-141609
- hsr: add support for configuring "interlink" property. RHEL-141608
- Support referring interface name using its alternative name. RHEL-141601</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 2.2.59-1" date="1772712000">- Upgrade to 2.2.59
- Add support for lock-mtu option. RHEL-151933.</changelog>
  <changelog author="J&#xE1;n V&#xE1;clav &lt;jvaclav@redhat.com&gt; - 2.2.60-1" date="1778068800">- Upgrade to 2.2.60
- ipv4: Add new parameter prefix-route-metric RHEL-170695</changelog>
</package>
<package pkgid="1b0e3dccaf2bc9821524c6edab13f5b762696e0132c7090d0de5478160be79d1" name="nmstate-libs-debuginfo" arch="i686">
  <version epoch="0" ver="2.2.60" rel="1.el9_8"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.48-1" date="1752321600">- Upgrade to 2.2.48
- Validate OVN bridge mapping. RHEL-85787
- Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784
- Support matching by PCI adress. RHEL-88993
- Apply dispatch changes first. RHEL-101742
- Fix SRIOV VF reference. RHEL-93180</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 2.2.49-1" date="1754395200">- Upgrade to 2.2.49
- Ignore desired MAC for bonds with fail_over_mac. RHEL-107526
- Fix setting DNS only with search or option. RHEL-104797</changelog>
  <changelog author="Mingyu Shi &lt;mshi@redhat.com&gt; - 2.2.50-1" date="1756728000">- Upgrade to 2.2.50
- Support MAC referring for VLAN in gen_conf. RHEL-110369
- Introduce state: ignore for route. RHEL-107130
- Support PCI address matching in gen_conf. RHEL-110369
- Support MacSec interface in gen_conf. RHEL-110369</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.52-1" date="1758024000">- Upgrade to 2.2.52
- Support interface altnative name. RHEL-110781</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.54-1" date="1760961600">- Upgrade to 2.2.54.
- Automatically set HSR port MAC address. RHEL-122171
- Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.56-1" date="1764072000">- Upgrade to 2.2.56
- Allow using VRF name to specify route table. RHEL-123541
- Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052
- Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731
- Support rightca ipsec option. RHEL-123542</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.57-1" date="1765281600">- Upgrade to 2.2.57
- Add libreswan leftprotoport and rightprotoport support. (RHEL-130912)</changelog>
  <changelog author="Mingyu Shi &lt;mshi@redhat.com&gt; - 2.2.58-1" date="1770811200">- Upgrade to 2.2.58
- vrf: Handle ignore interface when verifying desired state. RHEL-141606
- alt-name: Remove alt-names when interface marked as absent. RHEL-141602
- hsr: Automatically disable IP on hsr port. RHEL-141609
- hsr: add support for configuring "interlink" property. RHEL-141608
- Support referring interface name using its alternative name. RHEL-141601</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 2.2.59-1" date="1772712000">- Upgrade to 2.2.59
- Add support for lock-mtu option. RHEL-151933.</changelog>
  <changelog author="J&#xE1;n V&#xE1;clav &lt;jvaclav@redhat.com&gt; - 2.2.60-1" date="1778068800">- Upgrade to 2.2.60
- ipv4: Add new parameter prefix-route-metric RHEL-170695</changelog>
</package>
<package pkgid="f117516e3e5f0baf981dcc54d902319c5dcec122095ab719d1995866ac12a8b4" name="nmstate-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.60" rel="1.el9_8"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.48-1" date="1752321600">- Upgrade to 2.2.48
- Validate OVN bridge mapping. RHEL-85787
- Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784
- Support matching by PCI adress. RHEL-88993
- Apply dispatch changes first. RHEL-101742
- Fix SRIOV VF reference. RHEL-93180</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 2.2.49-1" date="1754395200">- Upgrade to 2.2.49
- Ignore desired MAC for bonds with fail_over_mac. RHEL-107526
- Fix setting DNS only with search or option. RHEL-104797</changelog>
  <changelog author="Mingyu Shi &lt;mshi@redhat.com&gt; - 2.2.50-1" date="1756728000">- Upgrade to 2.2.50
- Support MAC referring for VLAN in gen_conf. RHEL-110369
- Introduce state: ignore for route. RHEL-107130
- Support PCI address matching in gen_conf. RHEL-110369
- Support MacSec interface in gen_conf. RHEL-110369</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.52-1" date="1758024000">- Upgrade to 2.2.52
- Support interface altnative name. RHEL-110781</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.54-1" date="1760961600">- Upgrade to 2.2.54.
- Automatically set HSR port MAC address. RHEL-122171
- Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.56-1" date="1764072000">- Upgrade to 2.2.56
- Allow using VRF name to specify route table. RHEL-123541
- Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052
- Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731
- Support rightca ipsec option. RHEL-123542</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 2.2.57-1" date="1765281600">- Upgrade to 2.2.57
- Add libreswan leftprotoport and rightprotoport support. (RHEL-130912)</changelog>
  <changelog author="Mingyu Shi &lt;mshi@redhat.com&gt; - 2.2.58-1" date="1770811200">- Upgrade to 2.2.58
- vrf: Handle ignore interface when verifying desired state. RHEL-141606
- alt-name: Remove alt-names when interface marked as absent. RHEL-141602
- hsr: Automatically disable IP on hsr port. RHEL-141609
- hsr: add support for configuring "interlink" property. RHEL-141608
- Support referring interface name using its alternative name. RHEL-141601</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 2.2.59-1" date="1772712000">- Upgrade to 2.2.59
- Add support for lock-mtu option. RHEL-151933.</changelog>
  <changelog author="J&#xE1;n V&#xE1;clav &lt;jvaclav@redhat.com&gt; - 2.2.60-1" date="1778068800">- Upgrade to 2.2.60
- ipv4: Add new parameter prefix-route-metric RHEL-170695</changelog>
</package>
<package pkgid="c096b7aa209b3aa39bc97ce3bbc30f4a789f9d186c4024cd10a0dfd16eae9321" name="nodejs-debugsource" arch="i686">
  <version epoch="1" ver="20.20.2" rel="1.module+el9.7.0+163+27bc84b8"/>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1:20.17.0-1" date="1727092800">- Update to 20.17.0
  Resolves: RHEL-58721</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1:20.18.1-1" date="1733313600">- Update to version 20.18.1</changelog>
  <changelog author="Andrei Radchenko &lt;aradchen@redhat.com&gt; - 1:20.18.2-1" date="1738152000">- Update to version 20.18.2
  Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
  Resolves: RHEL-76363 RHEL-76554 RHEL-76540</changelog>
  <changelog author="Andrei Radchenko &lt;aradchen@redhat.com&gt; - 1:20.18.2-2" date="1741176000">- Disable npm's update-notifier
  Resolves: RHEL-81078</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1:20.18.2-3" date="1744718400">- Update c-ares to 1.34.5 to address CVE-2025-31498</changelog>
  <changelog author="Andrei Radchenko &lt;aradchen@redhat.com&gt; - 1:20.19.1-1" date="1745496000">- Update to version 20.19.1
  Resolves: RHEL-78764</changelog>
  <changelog author="Andrei Radchenko &lt;aradchen@redhat.com&gt; - 1:20.19.2-1" date="1747310400">- Update to version 20.19.2
  Resolves: RHEL-92865 RHEL-88876 RHEL-91597</changelog>
  <changelog author="Andrei Radchenko &lt;aradchen@redhat.com&gt; - 1:20.19.5-1" date="1757937600">- Update to version 20.19.5
  Resolves: RHEL-114749</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 1:20.20.0-1" date="1768392000">- Update to version 20.20.0
  Resolves: RHEL-141917</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 1:20.20.2-1" date="1775044800">- Update to version 20.20.2
  Patch nghttp2 to version 1.68.1 and disable tests which would fail due to this change.
  Resolves: RHEL-164336
  Fixes:  CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 CVE-2026-21710</changelog>
</package>
<package pkgid="9a8d9052f604aa074fe37a8cbc2bac0bc6c574fd548e426c7cd2e79253dcc401" name="nodejs-debugsource" arch="i686">
  <version epoch="1" ver="22.22.2" rel="1.module+el9.7.0+167+475c6634"/>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1:22.13.1-1" date="1738238400">- Update to version 22.13.1
  Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
  Resolves: RHEL-76354</changelog>
  <changelog author="Andrei Radchenko &lt;aradchen@redhat.com&gt; - 1:22.13.1-2" date="1741003200">- Remove obsolete lua pretransaction script from spec file
  Resolves: RHEL-81119
- Disable npm update notifications for users
  Resolves: RHEL-81079</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 1:22.13.1-3" date="1744632000">- Update c-ares to newest version with fix for CVE-2025-31498
  Resolves: RHEL-86587</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 1:22.13.1-4" date="1745323200">- Patch fix for sqlite CVE-2025-31498
  Resolves: RHEL-87320</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 1:22.15.0-1" date="1745496000">- Update to 22.15.0
- Drop upstream patches</changelog>
  <changelog author="Andrei Radchenko &lt;aradchen@redhat.com&gt; - 1:22.16.0-1" date="1747742400">- Update to 22.16.0
  Resolves: RHEL-92870 RHEL-89599 RHEL-92058</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 1:22.16.0-2" date="1753099200">- Patch fix for CVE-2025-6965
  Resolves: RHEL-103853</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 1.22.19.0-1" date="1756468800">- Update to 22.19.0
  Resolves: RHEL-111913</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 1:22.22.0-1" date="1768305600">- Update to 22.22.0
  Resolves: RHEL-118153</changelog>
  <changelog author="Andrei Radchenko &lt;aradchen@redhat.com&gt; - 1:22.22.2-1" date="1774440000">- Update to version 22.22.2
- introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
- disabled failing tests in nghttp2 due to newer version
- patch for npm/braces CVE-2026-25547
  Resolves: RHEL-154021
  Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547</changelog>
</package>
<package pkgid="b3bf3b1a310bef5324a1ee44176c88203cc712f38910fab11311c86ba3ad002c" name="nodejs-libs-debuginfo" arch="i686">
  <version epoch="1" ver="22.22.2" rel="1.module+el9.7.0+167+475c6634"/>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1:22.13.1-1" date="1738238400">- Update to version 22.13.1
  Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
  Resolves: RHEL-76354</changelog>
  <changelog author="Andrei Radchenko &lt;aradchen@redhat.com&gt; - 1:22.13.1-2" date="1741003200">- Remove obsolete lua pretransaction script from spec file
  Resolves: RHEL-81119
- Disable npm update notifications for users
  Resolves: RHEL-81079</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 1:22.13.1-3" date="1744632000">- Update c-ares to newest version with fix for CVE-2025-31498
  Resolves: RHEL-86587</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 1:22.13.1-4" date="1745323200">- Patch fix for sqlite CVE-2025-31498
  Resolves: RHEL-87320</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 1:22.15.0-1" date="1745496000">- Update to 22.15.0
- Drop upstream patches</changelog>
  <changelog author="Andrei Radchenko &lt;aradchen@redhat.com&gt; - 1:22.16.0-1" date="1747742400">- Update to 22.16.0
  Resolves: RHEL-92870 RHEL-89599 RHEL-92058</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 1:22.16.0-2" date="1753099200">- Patch fix for CVE-2025-6965
  Resolves: RHEL-103853</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 1.22.19.0-1" date="1756468800">- Update to 22.19.0
  Resolves: RHEL-111913</changelog>
  <changelog author="Tomas Juhasz &lt;tjuhasz@redhat.com&gt; - 1:22.22.0-1" date="1768305600">- Update to 22.22.0
  Resolves: RHEL-118153</changelog>
  <changelog author="Andrei Radchenko &lt;aradchen@redhat.com&gt; - 1:22.22.2-1" date="1774440000">- Update to version 22.22.2
- introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
- disabled failing tests in nghttp2 due to newer version
- patch for npm/braces CVE-2026-25547
  Resolves: RHEL-154021
  Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547</changelog>
</package>
<package pkgid="a2ac9a3dc70f3e5db153c0a384b882eb1e0781d9ca1bb5dc0949b39425276bf1" name="nscd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="c4a7791e8be8314cc6e45220c74642b0a1c49c798a7ddd644dbac64bb7a716d9" name="nscd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="e3757133785330fde5f1148d2885ba89216232533507d49f696777e754e99fbf" name="nscd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="610c3bd2f3c0ed5ab4b902d763b06ad2938d5c84c857564c5af304784476b9af" name="nscd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="d9b563c4b1b1ccaf8be07adf83ea65228b675120e6250049848cc627280cdf40" name="nss_db-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="82325f51daab1cf025949fdf05be258fdc4624347702af9f09ce86d3516243ca" name="nss_db-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="8ca8daaf552ad0002fb52b13001a65e00ea5e355fc7666cf8fc08752c2fcb8a0" name="nss_db-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="376653c5e02f9fe7d2deb42d27742b4bfba90759f93ba5939e5c237a13d4eb9b" name="nss_db-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="1b1ce072073aa9a9acb025b0dd7f02e9fe6347af3571f2b1b3d7b5560af92e16" name="nss_db-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="a32d04d992aa3eb20ea8bc8acb8916447d175922d522732b9404b6249bae2bed" name="nss_db-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="6e48e6de7bac0c4eb93bbf923f087eacb0f84686d4b1b2a759580e26155f9919" name="nss_db-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="b3c0a6c8734a0feb22924702af37860dccf6188c6e97ece3b900a8fea49639cd" name="nss_db-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="9c63dda943096c3c8c57d1cf72bd9f43ce0959229c2d357ecfb403032fc9ffe2" name="nss_hesiod-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="3351cd6b50b97408204607ba57b2440a46372766d7623d08761e464ee042e4b6" name="nss_hesiod-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="ab8bf63dcd5b0f8648b19fc0e5fc0a8b894455f6986e0c53519ab77099e07de9" name="nss_hesiod-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="9c43cf1bf0375cafe542679c30e58bad72f22e38ab177a02e6c19a172bf8f28e" name="nss_hesiod-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="aac7e9d9471c5b8812566598c27cf301347a577c584e4596bea221628c47b1b0" name="nss_hesiod-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="9518c5765be489ab5ab03873c74d8829fa5c8e818ced22f78836501a896633ad" name="nss_hesiod-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="dc5798e81eccbd330ad0aa089b23c5f63b5fecb1986152f408b7a75010619715" name="nss_hesiod-debuginfo" arch="i686">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="7410c2844ea7107dc7146a029108e2e4d6957e82dc67f2031ad9ea7e7ca01685" name="nss_hesiod-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="b86c5c49d3f59fef8dd2ab4c076e747aa758c5302c6a82a03b0adad257512937" name="numatop-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4" rel="9.el9"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.3.3" date="1702036800">- Add Power10 support</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.4.1" date="1706788800">- Add initial support for EMR</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.4.5" date="1735819200">- Fix ncures race issue</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.4.6" date="1735819201">- Add support for intel  GNR and SRF</changelog>
</package>
<package pkgid="44030d8729893595dbbaef846084a38e336dfef64012db594067b0621a4fc424" name="numatop-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4" rel="9.el9"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.3.3" date="1702036800">- Add Power10 support</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.4.1" date="1706788800">- Add initial support for EMR</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.4.5" date="1735819200">- Fix ncures race issue</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.4.6" date="1735819201">- Add support for intel  GNR and SRF</changelog>
</package>
<package pkgid="779967c0f83f3849a82f9cb0c8dbfc1283d2fa7bb8dd5778ae5bf8d437f531c4" name="oci-seccomp-bpf-hook-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="2.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.2.10-2" date="1723723200">- rebuild
- Resolves: RHEL-35939</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.2.10-3" date="1733313600">- rebuild
- Resolves: RHEL-69918</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.2.11-1" date="1744200000">- update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11
- simplify spec
- Resolves: RHEL-86603</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.2.11-2" date="1783425600">- rebuild for CVE-2026-33811
  Resolves: RHEL-187325</changelog>
</package>
<package pkgid="d68db12b66d8ed98642c6f2db5e804d1a7aa91e0169fe2e773de10b7f746d0c8" name="oci-seccomp-bpf-hook-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="2.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.2.10-2" date="1723723200">- rebuild
- Resolves: RHEL-35939</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.2.10-3" date="1733313600">- rebuild
- Resolves: RHEL-69918</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.2.11-1" date="1744200000">- update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11
- simplify spec
- Resolves: RHEL-86603</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.2.11-2" date="1783425600">- rebuild for CVE-2026-33811
  Resolves: RHEL-187325</changelog>
</package>
<package pkgid="55a004916d5f4bd518cde630afa00f66d0ea1ecac97440cb55d591599f4c25a4" name="opencryptoki-ccatok-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.2" date="1779796800">- Resolves: RHEL-171562, Fix CVE-2026-40253, possible out-of-bounds access in BER decode functions</changelog>
</package>
<package pkgid="5df8b06abadad7e7cdb0475716b56d2518a697414afe150d5b104126dfa64a06" name="opencryptoki-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.2" date="1779796800">- Resolves: RHEL-171562, Fix CVE-2026-40253, possible out-of-bounds access in BER decode functions</changelog>
</package>
<package pkgid="baa2bef18f21670e988ac9f60992bcf8adf1799e1067a9bfde9243c633360776" name="opencryptoki-debugsource" arch="i686">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.2" date="1779796800">- Resolves: RHEL-171562, Fix CVE-2026-40253, possible out-of-bounds access in BER decode functions</changelog>
</package>
<package pkgid="f71fd4bb096fead53458918878c30d7aec1bb274777a32be6bf8e5797bef8f3c" name="opencryptoki-debugsource" arch="x86_64">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.2" date="1779796800">- Resolves: RHEL-171562, Fix CVE-2026-40253, possible out-of-bounds access in BER decode functions</changelog>
</package>
<package pkgid="55eb17312feba01da7783fc86a7e859393c3ac37da658b2349e944af27127fec" name="opencryptoki-icsftok-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.2" date="1779796800">- Resolves: RHEL-171562, Fix CVE-2026-40253, possible out-of-bounds access in BER decode functions</changelog>
</package>
<package pkgid="9b2daa2115b4eda832e9bf0b444220a653eff228a586a633a8db28fc2480a831" name="opencryptoki-libs-debuginfo" arch="i686">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.2" date="1779796800">- Resolves: RHEL-171562, Fix CVE-2026-40253, possible out-of-bounds access in BER decode functions</changelog>
</package>
<package pkgid="70d731e1512ea0299a344cd4f56c70751a246ad8bce20b37262e69cef77ec3d9" name="opencryptoki-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.2" date="1779796800">- Resolves: RHEL-171562, Fix CVE-2026-40253, possible out-of-bounds access in BER decode functions</changelog>
</package>
<package pkgid="9d301e93886d8bf1b4865d963234696d64a67f832f2e2c2373e505e843334239" name="opencryptoki-swtok-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.26.0" rel="2.el9_8.2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-4" date="1742385600">- Resolves: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.24.0-5" date="1744200000">- Related: RHEL-77147, opencryptoki doesn't work in image mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-1" date="1751630400">- Resolves: RHEL-73344, upgrade openCryptoki
- Resolves: RHEL-90590, basic support of AES-GCM
- Resolves: RHEL-72965, cca token support cipher keys
- Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
- Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
- Resolves: RHEL-75762, ep11 token: import and export of secure key objects
- Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
- Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-2" date="1752494400">- Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
- Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-3" date="1753099200">- Fix incorrect effective group id of pkcsslotd daemon
- Fix covscan findings
  Resolves: RHEL-104602</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.25.0-4" date="1755086400">- Fix pkcsslotd fails to start in FIPS
- Drop tier1 test as it mostly provides duplicate results
- Enable ci test for FIPS mode
  Resolves: RHEL-109050</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-1" date="1765972800">- Resolves: RHEL-75139, ep11 token BLS support
- Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
- Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
- Resolves: RHEL-100059, openCryptoki 3.26.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2" date="1770984000">- Resolves: RHEL-144821, CVE-2026-23893</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.1" date="1777377600">- Resolves: RHEL-169586, Fix syslog message printing about different CPs</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.26.0-2.2" date="1779796800">- Resolves: RHEL-171562, Fix CVE-2026-40253, possible out-of-bounds access in BER decode functions</changelog>
</package>
<package pkgid="92fbfb79b732f962857a5c22b578b16a4acba24ebd628e01dc81249549c4910d" name="openexr-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="3.el9_7.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3" date="1729684800">- fix CVE-2023-5481 (RHEL-23879)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.1" date="1775044800">- fix CVE-2026-27622</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.2" date="1777377600">- fix CVE-2026-34588</changelog>
</package>
<package pkgid="605d1a76b97c3225d6c9c38d4ce618acadb70a9865518fd226fed4b93f766e4a" name="openexr-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="3.el9_8.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3" date="1729684800">- fix CVE-2023-5481 (RHEL-23879)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.1" date="1774958400">- fix CVE-2026-27622</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.2" date="1777377600">- fix CVE-2026-34588</changelog>
</package>
<package pkgid="485632c7d473c28dd82ab561f0ca6abf9becdf269762b4ecf85675233d934916" name="openexr-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="3.el9_8.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3" date="1729684800">- fix CVE-2023-5481 (RHEL-23879)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.1" date="1774958400">- fix CVE-2026-27622</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.2" date="1777377600">- fix CVE-2026-34588</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.3" date="1782475200">- fix CVE-2026-41142
- fix CVE-2026-42216</changelog>
</package>
<package pkgid="2b3715bd020c36d0c5bdedba8548b91afb0311880f829975c464509cc5a4e744" name="openexr-debugsource" arch="i686">
  <version epoch="0" ver="3.1.1" rel="3.el9_7.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3" date="1729684800">- fix CVE-2023-5481 (RHEL-23879)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.1" date="1775044800">- fix CVE-2026-27622</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.2" date="1777377600">- fix CVE-2026-34588</changelog>
</package>
<package pkgid="a21c6ac56b20cfde2441fc2830da7e39dca1ce50f78f29cdaf5c77e613945305" name="openexr-debugsource" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="3.el9_7.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3" date="1729684800">- fix CVE-2023-5481 (RHEL-23879)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.1" date="1775044800">- fix CVE-2026-27622</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.2" date="1777377600">- fix CVE-2026-34588</changelog>
</package>
<package pkgid="d9dd3db2b28ecdcc277661c6c8d11219b866d4385120d8ac100bc6906c241f90" name="openexr-debugsource" arch="i686">
  <version epoch="0" ver="3.1.1" rel="3.el9_8.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3" date="1729684800">- fix CVE-2023-5481 (RHEL-23879)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.1" date="1774958400">- fix CVE-2026-27622</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.2" date="1777377600">- fix CVE-2026-34588</changelog>
</package>
<package pkgid="5a21f0bf46ab25cd58ea8cd689ca0974771bc4d3c06e6449dddf2a6ef6bfceed" name="openexr-debugsource" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="3.el9_8.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3" date="1729684800">- fix CVE-2023-5481 (RHEL-23879)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.1" date="1774958400">- fix CVE-2026-27622</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.2" date="1777377600">- fix CVE-2026-34588</changelog>
</package>
<package pkgid="8174163af233a883c285f14ab20c5f1709410c64e10d3dd8880467f8b3ec9fb8" name="openexr-debugsource" arch="i686">
  <version epoch="0" ver="3.1.1" rel="3.el9_8.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3" date="1729684800">- fix CVE-2023-5481 (RHEL-23879)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.1" date="1774958400">- fix CVE-2026-27622</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.2" date="1777377600">- fix CVE-2026-34588</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.3" date="1782475200">- fix CVE-2026-41142
- fix CVE-2026-42216</changelog>
</package>
<package pkgid="0f477c427e6801872689d96d38fbb22e243dab8440c34057e77700cb0929c003" name="openexr-debugsource" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="3.el9_8.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3" date="1729684800">- fix CVE-2023-5481 (RHEL-23879)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.1" date="1774958400">- fix CVE-2026-27622</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.2" date="1777377600">- fix CVE-2026-34588</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.3" date="1782475200">- fix CVE-2026-41142
- fix CVE-2026-42216</changelog>
</package>
<package pkgid="4c407d071759edd73573662d78ed6695de0fd40cac749d8c3533505fb6815111" name="openexr-libs-debuginfo" arch="i686">
  <version epoch="0" ver="3.1.1" rel="3.el9_7.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3" date="1729684800">- fix CVE-2023-5481 (RHEL-23879)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.1" date="1775044800">- fix CVE-2026-27622</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.2" date="1777377600">- fix CVE-2026-34588</changelog>
</package>
<package pkgid="92424544e8e2f87cf9f3b978756b7143c96184fce053c147ccd0dfe4810fb401" name="openexr-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="3.el9_7.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3" date="1729684800">- fix CVE-2023-5481 (RHEL-23879)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.1" date="1775044800">- fix CVE-2026-27622</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.2" date="1777377600">- fix CVE-2026-34588</changelog>
</package>
<package pkgid="0066e83e320b07c87b0408958016dc887c6c5fb49d916a6ee81154d5e70b2338" name="openexr-libs-debuginfo" arch="i686">
  <version epoch="0" ver="3.1.1" rel="3.el9_8.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3" date="1729684800">- fix CVE-2023-5481 (RHEL-23879)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.1" date="1774958400">- fix CVE-2026-27622</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.2" date="1777377600">- fix CVE-2026-34588</changelog>
</package>
<package pkgid="33c5e497673915c1436e4525b4d8c91a8bc890d464ecfd5627872a2d4ae0b651" name="openexr-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="3.el9_8.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3" date="1729684800">- fix CVE-2023-5481 (RHEL-23879)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.1" date="1774958400">- fix CVE-2026-27622</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.2" date="1777377600">- fix CVE-2026-34588</changelog>
</package>
<package pkgid="e933b9fa9de94ca7fdc04c95011ef05bd4fd027ff89c993c3f25d05b8a06975e" name="openexr-libs-debuginfo" arch="i686">
  <version epoch="0" ver="3.1.1" rel="3.el9_8.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3" date="1729684800">- fix CVE-2023-5481 (RHEL-23879)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.1" date="1774958400">- fix CVE-2026-27622</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.2" date="1777377600">- fix CVE-2026-34588</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.3" date="1782475200">- fix CVE-2026-41142
- fix CVE-2026-42216</changelog>
</package>
<package pkgid="41fe70e995e267a11c4d10ec61676e048947c4fb7880cf41877d0d5e67870a94" name="openexr-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="3.el9_8.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3" date="1729684800">- fix CVE-2023-5481 (RHEL-23879)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.1" date="1774958400">- fix CVE-2026-27622</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.2" date="1777377600">- fix CVE-2026-34588</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.1-3.3" date="1782475200">- fix CVE-2026-41142
- fix CVE-2026-42216</changelog>
</package>
<package pkgid="986eca7eb44a08a292a8d84a4f7bd72627ffa6bdbc3567c576744341d37d779d" name="openssh-clients-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.9p1" rel="7.el9_8"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.7p1-46" date="1753099200">- Move the redhat help message to debug1 log level
  Resolves: RHEL-104580</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 9.9p1-1" date="1757505600">- Rebase to version 9.9
  Resolves: RHEL-108912</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-2" date="1761566400">- Fix implicit destination path selection when source path ends with ".."
  Resolves: RHEL-119515
- Canonicalize username when matching a user
  Resolves: RHEL-118372</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-3" date="1765281600">- Enable support for DSA keys
  Resolves: RHEL-127624
- CVE-2025-61984: Reject usernames with control characters
  Resolves: RHEL-133959
- CVE-2025-61985: Reject URL-strings with NULL characters
  Resolves: RHEL-133960</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 9.9p1-4" date="1772020800">- Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode
  Resolves: RHEL-151580</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-5" date="1773662400">- CVE-2026-3497: Fix information disclosure or denial of service due
  to uninitialized variables in gssapi-keyex
  Resolves: RHEL-155824</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-6" date="1774526400">- Version bump</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-7" date="1776081600">- CVE-2026-35385: Fix privilege escalation via scp legacy protocol
  when not in preserving file mode
  Resolves: RHEL-164753
- CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
  multiplexing sessions
  Resolves: RHEL-166250
- CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
  and HostbasedAcceptedAlgorithms with regard to ECDSA keys
  Resolves: RHEL-166234
- CVE-2026-35414: Fix mishandling of authorized_keys principals option
  Resolves: RHEL-166202
- CVE-2026-35386: Add validation rules to usernames and hostnames
  set for ProxyJump/-J on the commandline
  Resolves: RHEL-166218</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 9.9p1-7.rocky.0.1" date="1779192000">- Remove Red Hat message</changelog>
  <changelog author="Songhee Yeon &lt;dl_le@navercorp.com&gt; - 9.9p1-7" date="1782993600">- Remove messages</changelog>
</package>
<package pkgid="a88d21f79f6ae27822dfabe0edef5fbd5e9c803b1d7f136f0e48de1585435d94" name="openssh-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.9p1" rel="7.el9_8"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.7p1-46" date="1753099200">- Move the redhat help message to debug1 log level
  Resolves: RHEL-104580</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 9.9p1-1" date="1757505600">- Rebase to version 9.9
  Resolves: RHEL-108912</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-2" date="1761566400">- Fix implicit destination path selection when source path ends with ".."
  Resolves: RHEL-119515
- Canonicalize username when matching a user
  Resolves: RHEL-118372</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-3" date="1765281600">- Enable support for DSA keys
  Resolves: RHEL-127624
- CVE-2025-61984: Reject usernames with control characters
  Resolves: RHEL-133959
- CVE-2025-61985: Reject URL-strings with NULL characters
  Resolves: RHEL-133960</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 9.9p1-4" date="1772020800">- Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode
  Resolves: RHEL-151580</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-5" date="1773662400">- CVE-2026-3497: Fix information disclosure or denial of service due
  to uninitialized variables in gssapi-keyex
  Resolves: RHEL-155824</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-6" date="1774526400">- Version bump</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-7" date="1776081600">- CVE-2026-35385: Fix privilege escalation via scp legacy protocol
  when not in preserving file mode
  Resolves: RHEL-164753
- CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
  multiplexing sessions
  Resolves: RHEL-166250
- CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
  and HostbasedAcceptedAlgorithms with regard to ECDSA keys
  Resolves: RHEL-166234
- CVE-2026-35414: Fix mishandling of authorized_keys principals option
  Resolves: RHEL-166202
- CVE-2026-35386: Add validation rules to usernames and hostnames
  set for ProxyJump/-J on the commandline
  Resolves: RHEL-166218</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 9.9p1-7.rocky.0.1" date="1779192000">- Remove Red Hat message</changelog>
  <changelog author="Songhee Yeon &lt;dl_le@navercorp.com&gt; - 9.9p1-7" date="1782993600">- Remove messages</changelog>
</package>
<package pkgid="a728300e69768c91b589876c61104f2fd352cfa6d487a1b1b4ce85843955db8b" name="openssh-keycat-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.9p1" rel="7.el9_8"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.7p1-46" date="1753099200">- Move the redhat help message to debug1 log level
  Resolves: RHEL-104580</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 9.9p1-1" date="1757505600">- Rebase to version 9.9
  Resolves: RHEL-108912</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-2" date="1761566400">- Fix implicit destination path selection when source path ends with ".."
  Resolves: RHEL-119515
- Canonicalize username when matching a user
  Resolves: RHEL-118372</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-3" date="1765281600">- Enable support for DSA keys
  Resolves: RHEL-127624
- CVE-2025-61984: Reject usernames with control characters
  Resolves: RHEL-133959
- CVE-2025-61985: Reject URL-strings with NULL characters
  Resolves: RHEL-133960</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 9.9p1-4" date="1772020800">- Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode
  Resolves: RHEL-151580</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-5" date="1773662400">- CVE-2026-3497: Fix information disclosure or denial of service due
  to uninitialized variables in gssapi-keyex
  Resolves: RHEL-155824</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-6" date="1774526400">- Version bump</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-7" date="1776081600">- CVE-2026-35385: Fix privilege escalation via scp legacy protocol
  when not in preserving file mode
  Resolves: RHEL-164753
- CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
  multiplexing sessions
  Resolves: RHEL-166250
- CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
  and HostbasedAcceptedAlgorithms with regard to ECDSA keys
  Resolves: RHEL-166234
- CVE-2026-35414: Fix mishandling of authorized_keys principals option
  Resolves: RHEL-166202
- CVE-2026-35386: Add validation rules to usernames and hostnames
  set for ProxyJump/-J on the commandline
  Resolves: RHEL-166218</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 9.9p1-7.rocky.0.1" date="1779192000">- Remove Red Hat message</changelog>
  <changelog author="Songhee Yeon &lt;dl_le@navercorp.com&gt; - 9.9p1-7" date="1782993600">- Remove messages</changelog>
</package>
<package pkgid="f937ae5943f9a0c5af69d397c71d203f2098f6645eaacf782311dbda31dead18" name="openssh-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.9p1" rel="7.el9_8"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.7p1-46" date="1753099200">- Move the redhat help message to debug1 log level
  Resolves: RHEL-104580</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 9.9p1-1" date="1757505600">- Rebase to version 9.9
  Resolves: RHEL-108912</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-2" date="1761566400">- Fix implicit destination path selection when source path ends with ".."
  Resolves: RHEL-119515
- Canonicalize username when matching a user
  Resolves: RHEL-118372</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-3" date="1765281600">- Enable support for DSA keys
  Resolves: RHEL-127624
- CVE-2025-61984: Reject usernames with control characters
  Resolves: RHEL-133959
- CVE-2025-61985: Reject URL-strings with NULL characters
  Resolves: RHEL-133960</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 9.9p1-4" date="1772020800">- Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode
  Resolves: RHEL-151580</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-5" date="1773662400">- CVE-2026-3497: Fix information disclosure or denial of service due
  to uninitialized variables in gssapi-keyex
  Resolves: RHEL-155824</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-6" date="1774526400">- Version bump</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-7" date="1776081600">- CVE-2026-35385: Fix privilege escalation via scp legacy protocol
  when not in preserving file mode
  Resolves: RHEL-164753
- CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
  multiplexing sessions
  Resolves: RHEL-166250
- CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
  and HostbasedAcceptedAlgorithms with regard to ECDSA keys
  Resolves: RHEL-166234
- CVE-2026-35414: Fix mishandling of authorized_keys principals option
  Resolves: RHEL-166202
- CVE-2026-35386: Add validation rules to usernames and hostnames
  set for ProxyJump/-J on the commandline
  Resolves: RHEL-166218</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 9.9p1-7.rocky.0.1" date="1779192000">- Remove Red Hat message</changelog>
  <changelog author="Songhee Yeon &lt;dl_le@navercorp.com&gt; - 9.9p1-7" date="1782993600">- Remove messages</changelog>
</package>
<package pkgid="44145fad57ba9e0266ec00ec5efcacba4b2680210161c2907ceb06f2f67af80a" name="openssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="5.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
</package>
<package pkgid="0577431c3553fc3fd3cf54e121ee00e089cfa3604342883ce3780b266a5078d1" name="openssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="6.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-6" date="1784116800">- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary
  Resolves: RHEL-210862</changelog>
</package>
<package pkgid="b2cfb81a5278047f49a9b5b4ac614002209327d1ff3074c259836ef6c08bd59c" name="openssl-debugsource" arch="i686">
  <version epoch="1" ver="3.5.5" rel="5.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
</package>
<package pkgid="3fca86e4fb71844f4ef50d2b5038846f5a381074f40d66f06b68355f7e069cae" name="openssl-debugsource" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="5.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
</package>
<package pkgid="92cba6f659197d01d94a0649e28a7793556213c972656042451a0639f240df38" name="openssl-debugsource" arch="i686">
  <version epoch="1" ver="3.5.5" rel="6.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-6" date="1784116800">- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary
  Resolves: RHEL-210862</changelog>
</package>
<package pkgid="d00829c704ac3b6e26217997aa979d1923a4585c1da2fadd1bbc4098bf3c1b1b" name="openssl-debugsource" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="6.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-6" date="1784116800">- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary
  Resolves: RHEL-210862</changelog>
</package>
<package pkgid="192ea3f9dfd6626dca87f155d208183efee6886fb9cdf3c1e7142f85b496ef0a" name="openssl-fips-provider-debuginfo" arch="i686">
  <version epoch="1" ver="3.5.5" rel="5.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
</package>
<package pkgid="41e69eca8e183ae4556e0331890fc58e8664b007d1e68b8f09c4b0774f2e3934" name="openssl-fips-provider-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="5.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
</package>
<package pkgid="2daee2e3af025132bc9170a764987b1616f3869ebf71b4acb153f06917fb8edf" name="openssl-fips-provider-debuginfo" arch="i686">
  <version epoch="1" ver="3.5.5" rel="6.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-6" date="1784116800">- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary
  Resolves: RHEL-210862</changelog>
</package>
<package pkgid="76c751d3e90e54b2c938250cc04a9870454cef529fe5c4d533f3ab28a1806ca6" name="openssl-fips-provider-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="6.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-6" date="1784116800">- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary
  Resolves: RHEL-210862</changelog>
</package>
<package pkgid="d5ee238b8f039f56de0872f4fc3a70436e327c243d2d8c4c906fa06b7222edef" name="openssl-libs-debuginfo" arch="i686">
  <version epoch="1" ver="3.5.5" rel="5.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
</package>
<package pkgid="1929e76172fcd6b7db84029d40718c037f63e81954636a316a3d2d05a35b9d0a" name="openssl-libs-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="5.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-2" date="1752667200">- Move fips.so to a seprate subpackage
  Reverts FIPS self test for SLH-DSA
  Add Suggests to try to prefer the openssl-fips-provider package
  over the fips-provider-next package by default
  Revolves: RHEL-102408
  Related: RHEL-80854</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
</package>
<package pkgid="003064167e2aef0d21d052d9c5ec46d2f66fc302a88921b4e5aa00e7500f5d39" name="openssl-libs-debuginfo" arch="i686">
  <version epoch="1" ver="3.5.5" rel="6.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-6" date="1784116800">- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary
  Resolves: RHEL-210862</changelog>
</package>
<package pkgid="5d1f605bff3ce47c2b34efe2839f9fb866a40b31acd6795f951d5dd7037b06b4" name="openssl-libs-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.5.5" rel="6.el9_8"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1:3.5.1-3" date="1752753600">- Add custom define to disable symbol versioning in downstream patched code
  Also add stricter Suggests for openssl-fips-provider
  Resolves: RHEL-104236
- Fix Requires/Provider to fix default install of fips providers
  Resolves: RHEL-104856</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-4" date="1756382400">- Make openssl speed test signatures without errors
  Resolves: RHEL-95502
- Build tests in check and without LTO
  Resolves: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-5" date="1757073600">- Fix globally disabled LTO
  Related: RHEL-111633</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.1-6" date="1761220800">- Fix CVE-2025-9230
  Resolves: RHEL-115928</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-1" date="1769515200">- Rebase to OpenSSL 3.5.5
  Resolves: RHEL-136895
  Resolves: RHEL-142004
  Resolves: RHEL-142012
  Resolves: RHEL-142020
  Resolves: RHEL-142024
  Resolves: RHEL-142028
  Resolves: RHEL-142032
  Resolves: RHEL-142036
  Resolves: RHEL-142040
  Resolves: RHEL-142044
  Resolves: RHEL-142048
  Resolves: RHEL-142052
  Resolves: RHEL-142056</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-2" date="1775736000">- Fix CVE-2026-31790
  Resolves: RHEL-161586</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-3" date="1778673600">- Fix CVE-2026-28390
  Resolves: RHEL-165870</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:3.5.5-4" date="1780315200">Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-5" date="1782388800">- Patch asn1_d2i_read_bio to read headers without blocking
  Resolves: RHEL-178642</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 1:3.5.5-6" date="1784116800">- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary
  Resolves: RHEL-210862</changelog>
</package>
<package pkgid="043eceaddcf2bbd79f360ef34a7ace55e9f5e460009e715ea804438bb88ad808" name="p11-kit-debuginfo" arch="i686">
  <version epoch="0" ver="0.26.2" rel="1.el9"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.10-1" date="1758542400">- Update to new upstream release 0.25.10
  Resolves: RHEL-115453</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.1-1" date="1769083200">- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.2-1" date="1770724800">- Rebase to 0.26.2
  Resolves: RHEL-147825</changelog>
</package>
<package pkgid="138fbc1ba5cd26969b8416afc0be70ea8142de70fda65f79296727948faf58fe" name="p11-kit-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.26.2" rel="1.el9"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.10-1" date="1758542400">- Update to new upstream release 0.25.10
  Resolves: RHEL-115453</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.1-1" date="1769083200">- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.2-1" date="1770724800">- Rebase to 0.26.2
  Resolves: RHEL-147825</changelog>
</package>
<package pkgid="621da84d4a6d1002fbbd518049eb8080a854322ab593b9ee4f2a01bf90845190" name="p11-kit-debuginfo" arch="i686">
  <version epoch="0" ver="0.26.4" rel="1.el9_8"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.10-1" date="1758542400">- Update to new upstream release 0.25.10
  Resolves: RHEL-115453</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.1-1" date="1769083200">- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.2-1" date="1770724800">- Rebase to 0.26.2
  Resolves: RHEL-147825</changelog>
</package>
<package pkgid="1af462b2ad9c5c3e13028eceb018eb58ec9bf196d7356ad38b715956507ddbdb" name="p11-kit-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.26.4" rel="1.el9_8"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.10-1" date="1758542400">- Update to new upstream release 0.25.10
  Resolves: RHEL-115453</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.1-1" date="1769083200">- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.2-1" date="1770724800">- Rebase to 0.26.2
  Resolves: RHEL-147825</changelog>
</package>
<package pkgid="8da1ff7028ae182a93582791bb5d9843fe3422920cf1abefca8e41a29d952cd8" name="p11-kit-debugsource" arch="i686">
  <version epoch="0" ver="0.26.4" rel="1.el9_8"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.10-1" date="1758542400">- Update to new upstream release 0.25.10
  Resolves: RHEL-115453</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.1-1" date="1769083200">- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.2-1" date="1770724800">- Rebase to 0.26.2
  Resolves: RHEL-147825</changelog>
</package>
<package pkgid="7f1c469909b05b0c8c7a690225c61fbd1d5506d98a3fe4a3cc70a29c0330a4b1" name="p11-kit-debugsource" arch="x86_64">
  <version epoch="0" ver="0.26.4" rel="1.el9_8"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.10-1" date="1758542400">- Update to new upstream release 0.25.10
  Resolves: RHEL-115453</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.1-1" date="1769083200">- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.2-1" date="1770724800">- Rebase to 0.26.2
  Resolves: RHEL-147825</changelog>
</package>
<package pkgid="ecd9308a9f1c0456ad30fbcd6e51a36e060607f1f3087be64f81342d7231e7c5" name="p11-kit-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.26.4" rel="1.el9_8"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.10-1" date="1758542400">- Update to new upstream release 0.25.10
  Resolves: RHEL-115453</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.1-1" date="1769083200">- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.2-1" date="1770724800">- Rebase to 0.26.2
  Resolves: RHEL-147825</changelog>
</package>
<package pkgid="a0a881c6c95d84db474e81cede540d0fdc432a11b02976f6bfc6f77920839ee4" name="p11-kit-trust-debuginfo" arch="i686">
  <version epoch="0" ver="0.26.2" rel="1.el9"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.10-1" date="1758542400">- Update to new upstream release 0.25.10
  Resolves: RHEL-115453</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.1-1" date="1769083200">- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.2-1" date="1770724800">- Rebase to 0.26.2
  Resolves: RHEL-147825</changelog>
</package>
<package pkgid="bbd96204d8fbfd215c5eeb6d82bbc3ea4c8576e4e9db8c7290475a4e3bc572ef" name="p11-kit-trust-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.26.2" rel="1.el9"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.10-1" date="1758542400">- Update to new upstream release 0.25.10
  Resolves: RHEL-115453</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.1-1" date="1769083200">- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.2-1" date="1770724800">- Rebase to 0.26.2
  Resolves: RHEL-147825</changelog>
</package>
<package pkgid="6d66f0b85dee6002f71f3ec75e384b9ed15c52f9d6e6b35715318fb7eb877ebe" name="p11-kit-trust-debuginfo" arch="i686">
  <version epoch="0" ver="0.26.4" rel="1.el9_8"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.10-1" date="1758542400">- Update to new upstream release 0.25.10
  Resolves: RHEL-115453</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.1-1" date="1769083200">- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.2-1" date="1770724800">- Rebase to 0.26.2
  Resolves: RHEL-147825</changelog>
</package>
<package pkgid="938475ceb1cbff83669a4662203d15a0a35302de456df5e6b48ba50d391efded" name="p11-kit-trust-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.26.4" rel="1.el9_8"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.3-3" date="1729857600">- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.25.10-1" date="1758542400">- Update to new upstream release 0.25.10
  Resolves: RHEL-115453</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.1-1" date="1769083200">- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 0.26.2-1" date="1770724800">- Rebase to 0.26.2
  Resolves: RHEL-147825</changelog>
</package>
<package pkgid="01579c353191b4a616e51c7691006786976a76e71fe4089284eadb7ff63e5b71" name="pacemaker-cli-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="3.el9_8"/>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.8-2" date="1721217600">- Rebase on upstream 2.1.8-rc4 release
- Add ability to immediately shutdown system with PCMK_panic_action=
- Fix a memory leak in the attribute daemon
- Add ability to list options and parameters as parseable metadata
- crm_verify now reports invalid fence level indexes
- Fix an error in node ID handling in `crm_node -i`
- Fix regression in attrd_updater output
- Resolves: RHEL-39057
- Resolves: RHEL-40117
- Resolves: RHEL-23401
- Resolves: RHEL-2996
- Resolves: RHEL-47249
- Resolves: RHEL-45935</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.8-3" date="1723204800">- Rebase on upstream 2.1.8 final release
- Resolves: RHEL-38540</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.9-1" date="1730462400">- Rebase on upstream 2.1.9 final release
- Use async communication to establish TLS connections
- Fix regression in adding alerts to CIB
- Fix a crash in command line tools when stderr is closed
- Resolves: RHEL-61382
- Resolves: RHEL-34276
- Resolves: RHEL-55458
- Resolves: RHEL-59043</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-1" date="1750680000">- Rebase on upstream 2.1.10-rc1 release
- Use dbus to detect completion of systemd resource start/stop actions
- Add an option for controlling remote node fencing behavior
- Related: RHEL-89134
- Resolves: RHEL-86143
- Resolves: RHEL-84018</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-2" date="1762948800">- Handle large timeouts correctly in crm_resource --wait
- Do not try to connect to subdaemons before they're respawned
- Don't evict IPC clients as long as they're still processing messages
- Don't overwhelm the FSA queue with repeated CIB queries
- Resolves: RHEL-45869
- Resolves: RHEL-87484
- Resolves: RHEL-114894</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-3" date="1782820800">- Fix integer overflows in remote message decompression code (CVE-2026-10649)
- Resolves: RHEL-181150</changelog>
</package>
<package pkgid="e1e495943fab32c5534b68360c51cbeceaecd5798b0d54ee7cb143ea59f4f8c8" name="pacemaker-cluster-libs-debuginfo" arch="i686">
  <version epoch="0" ver="2.1.10" rel="3.el9_8"/>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.8-2" date="1721217600">- Rebase on upstream 2.1.8-rc4 release
- Add ability to immediately shutdown system with PCMK_panic_action=
- Fix a memory leak in the attribute daemon
- Add ability to list options and parameters as parseable metadata
- crm_verify now reports invalid fence level indexes
- Fix an error in node ID handling in `crm_node -i`
- Fix regression in attrd_updater output
- Resolves: RHEL-39057
- Resolves: RHEL-40117
- Resolves: RHEL-23401
- Resolves: RHEL-2996
- Resolves: RHEL-47249
- Resolves: RHEL-45935</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.8-3" date="1723204800">- Rebase on upstream 2.1.8 final release
- Resolves: RHEL-38540</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.9-1" date="1730462400">- Rebase on upstream 2.1.9 final release
- Use async communication to establish TLS connections
- Fix regression in adding alerts to CIB
- Fix a crash in command line tools when stderr is closed
- Resolves: RHEL-61382
- Resolves: RHEL-34276
- Resolves: RHEL-55458
- Resolves: RHEL-59043</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-1" date="1750680000">- Rebase on upstream 2.1.10-rc1 release
- Use dbus to detect completion of systemd resource start/stop actions
- Add an option for controlling remote node fencing behavior
- Related: RHEL-89134
- Resolves: RHEL-86143
- Resolves: RHEL-84018</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-2" date="1762948800">- Handle large timeouts correctly in crm_resource --wait
- Do not try to connect to subdaemons before they're respawned
- Don't evict IPC clients as long as they're still processing messages
- Don't overwhelm the FSA queue with repeated CIB queries
- Resolves: RHEL-45869
- Resolves: RHEL-87484
- Resolves: RHEL-114894</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-3" date="1782820800">- Fix integer overflows in remote message decompression code (CVE-2026-10649)
- Resolves: RHEL-181150</changelog>
</package>
<package pkgid="931038d6c4dd0c2380ada893bcf72cd45efc13cdc215489d9b51c09be4e6f1d2" name="pacemaker-cluster-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="3.el9_8"/>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.8-2" date="1721217600">- Rebase on upstream 2.1.8-rc4 release
- Add ability to immediately shutdown system with PCMK_panic_action=
- Fix a memory leak in the attribute daemon
- Add ability to list options and parameters as parseable metadata
- crm_verify now reports invalid fence level indexes
- Fix an error in node ID handling in `crm_node -i`
- Fix regression in attrd_updater output
- Resolves: RHEL-39057
- Resolves: RHEL-40117
- Resolves: RHEL-23401
- Resolves: RHEL-2996
- Resolves: RHEL-47249
- Resolves: RHEL-45935</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.8-3" date="1723204800">- Rebase on upstream 2.1.8 final release
- Resolves: RHEL-38540</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.9-1" date="1730462400">- Rebase on upstream 2.1.9 final release
- Use async communication to establish TLS connections
- Fix regression in adding alerts to CIB
- Fix a crash in command line tools when stderr is closed
- Resolves: RHEL-61382
- Resolves: RHEL-34276
- Resolves: RHEL-55458
- Resolves: RHEL-59043</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-1" date="1750680000">- Rebase on upstream 2.1.10-rc1 release
- Use dbus to detect completion of systemd resource start/stop actions
- Add an option for controlling remote node fencing behavior
- Related: RHEL-89134
- Resolves: RHEL-86143
- Resolves: RHEL-84018</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-2" date="1762948800">- Handle large timeouts correctly in crm_resource --wait
- Do not try to connect to subdaemons before they're respawned
- Don't evict IPC clients as long as they're still processing messages
- Don't overwhelm the FSA queue with repeated CIB queries
- Resolves: RHEL-45869
- Resolves: RHEL-87484
- Resolves: RHEL-114894</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-3" date="1782820800">- Fix integer overflows in remote message decompression code (CVE-2026-10649)
- Resolves: RHEL-181150</changelog>
</package>
<package pkgid="38508d9298d45fee665e74110eaf57bdd7c50eeddba873c120a7601c9d510399" name="pacemaker-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="3.el9_8"/>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.8-2" date="1721217600">- Rebase on upstream 2.1.8-rc4 release
- Add ability to immediately shutdown system with PCMK_panic_action=
- Fix a memory leak in the attribute daemon
- Add ability to list options and parameters as parseable metadata
- crm_verify now reports invalid fence level indexes
- Fix an error in node ID handling in `crm_node -i`
- Fix regression in attrd_updater output
- Resolves: RHEL-39057
- Resolves: RHEL-40117
- Resolves: RHEL-23401
- Resolves: RHEL-2996
- Resolves: RHEL-47249
- Resolves: RHEL-45935</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.8-3" date="1723204800">- Rebase on upstream 2.1.8 final release
- Resolves: RHEL-38540</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.9-1" date="1730462400">- Rebase on upstream 2.1.9 final release
- Use async communication to establish TLS connections
- Fix regression in adding alerts to CIB
- Fix a crash in command line tools when stderr is closed
- Resolves: RHEL-61382
- Resolves: RHEL-34276
- Resolves: RHEL-55458
- Resolves: RHEL-59043</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-1" date="1750680000">- Rebase on upstream 2.1.10-rc1 release
- Use dbus to detect completion of systemd resource start/stop actions
- Add an option for controlling remote node fencing behavior
- Related: RHEL-89134
- Resolves: RHEL-86143
- Resolves: RHEL-84018</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-2" date="1762948800">- Handle large timeouts correctly in crm_resource --wait
- Do not try to connect to subdaemons before they're respawned
- Don't evict IPC clients as long as they're still processing messages
- Don't overwhelm the FSA queue with repeated CIB queries
- Resolves: RHEL-45869
- Resolves: RHEL-87484
- Resolves: RHEL-114894</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-3" date="1782820800">- Fix integer overflows in remote message decompression code (CVE-2026-10649)
- Resolves: RHEL-181150</changelog>
</package>
<package pkgid="fc1999feaa3c28b016d13c7db1c6c0d3fcdb7aa2d5f5461a45180daf4e6d0440" name="pacemaker-debugsource" arch="i686">
  <version epoch="0" ver="2.1.10" rel="3.el9_8"/>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.8-2" date="1721217600">- Rebase on upstream 2.1.8-rc4 release
- Add ability to immediately shutdown system with PCMK_panic_action=
- Fix a memory leak in the attribute daemon
- Add ability to list options and parameters as parseable metadata
- crm_verify now reports invalid fence level indexes
- Fix an error in node ID handling in `crm_node -i`
- Fix regression in attrd_updater output
- Resolves: RHEL-39057
- Resolves: RHEL-40117
- Resolves: RHEL-23401
- Resolves: RHEL-2996
- Resolves: RHEL-47249
- Resolves: RHEL-45935</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.8-3" date="1723204800">- Rebase on upstream 2.1.8 final release
- Resolves: RHEL-38540</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.9-1" date="1730462400">- Rebase on upstream 2.1.9 final release
- Use async communication to establish TLS connections
- Fix regression in adding alerts to CIB
- Fix a crash in command line tools when stderr is closed
- Resolves: RHEL-61382
- Resolves: RHEL-34276
- Resolves: RHEL-55458
- Resolves: RHEL-59043</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-1" date="1750680000">- Rebase on upstream 2.1.10-rc1 release
- Use dbus to detect completion of systemd resource start/stop actions
- Add an option for controlling remote node fencing behavior
- Related: RHEL-89134
- Resolves: RHEL-86143
- Resolves: RHEL-84018</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-2" date="1762948800">- Handle large timeouts correctly in crm_resource --wait
- Do not try to connect to subdaemons before they're respawned
- Don't evict IPC clients as long as they're still processing messages
- Don't overwhelm the FSA queue with repeated CIB queries
- Resolves: RHEL-45869
- Resolves: RHEL-87484
- Resolves: RHEL-114894</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-3" date="1782820800">- Fix integer overflows in remote message decompression code (CVE-2026-10649)
- Resolves: RHEL-181150</changelog>
</package>
<package pkgid="ac2e514a044e61f20203ba0e902091f04b62ad2e1f44c30fc8949891374c42aa" name="pacemaker-debugsource" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="3.el9_8"/>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.8-2" date="1721217600">- Rebase on upstream 2.1.8-rc4 release
- Add ability to immediately shutdown system with PCMK_panic_action=
- Fix a memory leak in the attribute daemon
- Add ability to list options and parameters as parseable metadata
- crm_verify now reports invalid fence level indexes
- Fix an error in node ID handling in `crm_node -i`
- Fix regression in attrd_updater output
- Resolves: RHEL-39057
- Resolves: RHEL-40117
- Resolves: RHEL-23401
- Resolves: RHEL-2996
- Resolves: RHEL-47249
- Resolves: RHEL-45935</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.8-3" date="1723204800">- Rebase on upstream 2.1.8 final release
- Resolves: RHEL-38540</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.9-1" date="1730462400">- Rebase on upstream 2.1.9 final release
- Use async communication to establish TLS connections
- Fix regression in adding alerts to CIB
- Fix a crash in command line tools when stderr is closed
- Resolves: RHEL-61382
- Resolves: RHEL-34276
- Resolves: RHEL-55458
- Resolves: RHEL-59043</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-1" date="1750680000">- Rebase on upstream 2.1.10-rc1 release
- Use dbus to detect completion of systemd resource start/stop actions
- Add an option for controlling remote node fencing behavior
- Related: RHEL-89134
- Resolves: RHEL-86143
- Resolves: RHEL-84018</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-2" date="1762948800">- Handle large timeouts correctly in crm_resource --wait
- Do not try to connect to subdaemons before they're respawned
- Don't evict IPC clients as long as they're still processing messages
- Don't overwhelm the FSA queue with repeated CIB queries
- Resolves: RHEL-45869
- Resolves: RHEL-87484
- Resolves: RHEL-114894</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-3" date="1782820800">- Fix integer overflows in remote message decompression code (CVE-2026-10649)
- Resolves: RHEL-181150</changelog>
</package>
<package pkgid="4411696dd188a9d88f5398cf9be1e5594f0f95f406b98b6bd41e07597ffc8b79" name="pacemaker-libs-debuginfo" arch="i686">
  <version epoch="0" ver="2.1.10" rel="3.el9_8"/>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.8-2" date="1721217600">- Rebase on upstream 2.1.8-rc4 release
- Add ability to immediately shutdown system with PCMK_panic_action=
- Fix a memory leak in the attribute daemon
- Add ability to list options and parameters as parseable metadata
- crm_verify now reports invalid fence level indexes
- Fix an error in node ID handling in `crm_node -i`
- Fix regression in attrd_updater output
- Resolves: RHEL-39057
- Resolves: RHEL-40117
- Resolves: RHEL-23401
- Resolves: RHEL-2996
- Resolves: RHEL-47249
- Resolves: RHEL-45935</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.8-3" date="1723204800">- Rebase on upstream 2.1.8 final release
- Resolves: RHEL-38540</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.9-1" date="1730462400">- Rebase on upstream 2.1.9 final release
- Use async communication to establish TLS connections
- Fix regression in adding alerts to CIB
- Fix a crash in command line tools when stderr is closed
- Resolves: RHEL-61382
- Resolves: RHEL-34276
- Resolves: RHEL-55458
- Resolves: RHEL-59043</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-1" date="1750680000">- Rebase on upstream 2.1.10-rc1 release
- Use dbus to detect completion of systemd resource start/stop actions
- Add an option for controlling remote node fencing behavior
- Related: RHEL-89134
- Resolves: RHEL-86143
- Resolves: RHEL-84018</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-2" date="1762948800">- Handle large timeouts correctly in crm_resource --wait
- Do not try to connect to subdaemons before they're respawned
- Don't evict IPC clients as long as they're still processing messages
- Don't overwhelm the FSA queue with repeated CIB queries
- Resolves: RHEL-45869
- Resolves: RHEL-87484
- Resolves: RHEL-114894</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-3" date="1782820800">- Fix integer overflows in remote message decompression code (CVE-2026-10649)
- Resolves: RHEL-181150</changelog>
</package>
<package pkgid="18d8b8ad3a81b56b04b284e0153bd90632a6591dc7f49ed8209389413c9699a9" name="pacemaker-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="3.el9_8"/>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.8-2" date="1721217600">- Rebase on upstream 2.1.8-rc4 release
- Add ability to immediately shutdown system with PCMK_panic_action=
- Fix a memory leak in the attribute daemon
- Add ability to list options and parameters as parseable metadata
- crm_verify now reports invalid fence level indexes
- Fix an error in node ID handling in `crm_node -i`
- Fix regression in attrd_updater output
- Resolves: RHEL-39057
- Resolves: RHEL-40117
- Resolves: RHEL-23401
- Resolves: RHEL-2996
- Resolves: RHEL-47249
- Resolves: RHEL-45935</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.8-3" date="1723204800">- Rebase on upstream 2.1.8 final release
- Resolves: RHEL-38540</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.9-1" date="1730462400">- Rebase on upstream 2.1.9 final release
- Use async communication to establish TLS connections
- Fix regression in adding alerts to CIB
- Fix a crash in command line tools when stderr is closed
- Resolves: RHEL-61382
- Resolves: RHEL-34276
- Resolves: RHEL-55458
- Resolves: RHEL-59043</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-1" date="1750680000">- Rebase on upstream 2.1.10-rc1 release
- Use dbus to detect completion of systemd resource start/stop actions
- Add an option for controlling remote node fencing behavior
- Related: RHEL-89134
- Resolves: RHEL-86143
- Resolves: RHEL-84018</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-2" date="1762948800">- Handle large timeouts correctly in crm_resource --wait
- Do not try to connect to subdaemons before they're respawned
- Don't evict IPC clients as long as they're still processing messages
- Don't overwhelm the FSA queue with repeated CIB queries
- Resolves: RHEL-45869
- Resolves: RHEL-87484
- Resolves: RHEL-114894</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-3" date="1782820800">- Fix integer overflows in remote message decompression code (CVE-2026-10649)
- Resolves: RHEL-181150</changelog>
</package>
<package pkgid="caf4ffe5bfe553897f254c58ddbba1f43c7e368f6092780df0b9477173c2f9bb" name="pacemaker-remote-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="3.el9_8"/>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.8-2" date="1721217600">- Rebase on upstream 2.1.8-rc4 release
- Add ability to immediately shutdown system with PCMK_panic_action=
- Fix a memory leak in the attribute daemon
- Add ability to list options and parameters as parseable metadata
- crm_verify now reports invalid fence level indexes
- Fix an error in node ID handling in `crm_node -i`
- Fix regression in attrd_updater output
- Resolves: RHEL-39057
- Resolves: RHEL-40117
- Resolves: RHEL-23401
- Resolves: RHEL-2996
- Resolves: RHEL-47249
- Resolves: RHEL-45935</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.8-3" date="1723204800">- Rebase on upstream 2.1.8 final release
- Resolves: RHEL-38540</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.9-1" date="1730462400">- Rebase on upstream 2.1.9 final release
- Use async communication to establish TLS connections
- Fix regression in adding alerts to CIB
- Fix a crash in command line tools when stderr is closed
- Resolves: RHEL-61382
- Resolves: RHEL-34276
- Resolves: RHEL-55458
- Resolves: RHEL-59043</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-1" date="1750680000">- Rebase on upstream 2.1.10-rc1 release
- Use dbus to detect completion of systemd resource start/stop actions
- Add an option for controlling remote node fencing behavior
- Related: RHEL-89134
- Resolves: RHEL-86143
- Resolves: RHEL-84018</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-2" date="1762948800">- Handle large timeouts correctly in crm_resource --wait
- Do not try to connect to subdaemons before they're respawned
- Don't evict IPC clients as long as they're still processing messages
- Don't overwhelm the FSA queue with repeated CIB queries
- Resolves: RHEL-45869
- Resolves: RHEL-87484
- Resolves: RHEL-114894</changelog>
  <changelog author="Chris Lumens &lt;clumens@redhat.com&gt; - 2.1.10-3" date="1782820800">- Fix integer overflows in remote message decompression code (CVE-2026-10649)
- Resolves: RHEL-181150</changelog>
</package>
<package pkgid="677c40a42ca4dce70ba36e45f7ea60493f11e707fd82c439f84ea5e570706a3f" name="pam-debuginfo" arch="i686">
  <version epoch="0" ver="1.5.1" rel="28.el9"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-17" date="1704715200">- pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-20943</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-18" date="1706270400">- libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
- pam_access: handle hostnames in access.conf. Resolves: RHEL-22300</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-19" date="1707739200">- pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
  situations. CVE-2024-22365. Resolves: RHEL-21244</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-20" date="1718712000">- libpam: support long lines in service files. Resolves: RHEL-40705</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-22" date="1730721600">- pam_unix: always run the helper to obtain shadow password file entries.
  CVE-2024-10041. Resolves: RHEL-62879
- pam_access: always match local address and clarify LOCAL keyword behaviour.
  Resolves: RHEL-23631 and RHEL-39943</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-23" date="1732190400">- pam_access: rework resolving of tokens as hostname.
  Resolves: CVE-2024-10963 and RHEL-66244</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-27" date="1754395200">- pam_unix: sync expiry checks with shadow.
  Resolves: RHEL-70519, RHEL-95475, RHEL-96955 and RHEL-96973
- pam.conf: remove tallylog. Resolves: RHEL-15324
- pam_namespace: fix potential privilege escalation.
  Resolves: CVE-2025-6020 and RHEL-96727</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-28" date="1765368000">- pam_faillock: skip clearing user's failed attempt.
  Resolves: RHEL-130875</changelog>
</package>
<package pkgid="808f386517426546f5f74583f197b9a5b9d9589b1c11f6a953cdb87c07f50106" name="pam-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="28.el9"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-17" date="1704715200">- pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-20943</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-18" date="1706270400">- libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
- pam_access: handle hostnames in access.conf. Resolves: RHEL-22300</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-19" date="1707739200">- pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
  situations. CVE-2024-22365. Resolves: RHEL-21244</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-20" date="1718712000">- libpam: support long lines in service files. Resolves: RHEL-40705</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-22" date="1730721600">- pam_unix: always run the helper to obtain shadow password file entries.
  CVE-2024-10041. Resolves: RHEL-62879
- pam_access: always match local address and clarify LOCAL keyword behaviour.
  Resolves: RHEL-23631 and RHEL-39943</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-23" date="1732190400">- pam_access: rework resolving of tokens as hostname.
  Resolves: CVE-2024-10963 and RHEL-66244</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-27" date="1754395200">- pam_unix: sync expiry checks with shadow.
  Resolves: RHEL-70519, RHEL-95475, RHEL-96955 and RHEL-96973
- pam.conf: remove tallylog. Resolves: RHEL-15324
- pam_namespace: fix potential privilege escalation.
  Resolves: CVE-2025-6020 and RHEL-96727</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.5.1-28" date="1765368000">- pam_faillock: skip clearing user's failed attempt.
  Resolves: RHEL-130875</changelog>
</package>
<package pkgid="c5da11a162b97888ea92b79ddb22d500537c3428769e4d7725e937bdf5402b87" name="pam_cifscreds-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.6" rel="2.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-1" date="1728388800">- resolves: RHEL-61732 - Update to version 7.1</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-2" date="1728475200">- Fix damaged test filename</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.2-1" date="1741348800">- resolves: RHEL-82680 - Update to version 7.2</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.4-1" date="1764158400">- resolves: RHEL-110765 - fix regression with cifscreds(1)</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.5-1" date="1770120000">- resolves: RHEL-127499 - Enable debug logs in cifs.upcall</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.6-1" date="1782302400">- Update to version 7.6
- resolves: RHEL-185761 - CVE-2026-12505 cifs-utils: LPE via cifs.spnego</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.6-2" date="1783425600">- resolves: RHEL-192982 - fix krb5 mount regression</changelog>
</package>
<package pkgid="9da3afec23f5601ef7b4e708547b37116353656bb0de12fc8e28f723400616a5" name="papi-debuginfo" arch="i686">
  <version epoch="0" ver="7.2.0" rel="1.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 7.2.0-1" date="1762171200">- Rebase to papi 7.2.0
- Update license tag to BSD-3-Clause
- Remove old patches and add new patches for 7.2.0 compatibility
- Update configure options and package files
- Resolves: RHEL-121673</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 7.2.0-1.1" date="1780574400">- Generate Fortran headers deterministically to fix multilib file
  conflict on papi-devel. (RHEL-145965, RHEL-180678)</changelog>
</package>
<package pkgid="bd78efd3de4d43ad0aaa98869d64984a210486638e3a2f4fb495799c0e73b288" name="papi-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.2.0" rel="1.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 7.2.0-1" date="1762171200">- Rebase to papi 7.2.0
- Update license tag to BSD-3-Clause
- Remove old patches and add new patches for 7.2.0 compatibility
- Update configure options and package files
- Resolves: RHEL-121673</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 7.2.0-1.1" date="1780574400">- Generate Fortran headers deterministically to fix multilib file
  conflict on papi-devel. (RHEL-145965, RHEL-180678)</changelog>
</package>
<package pkgid="cd473b312f4c3fedfa7eb5df609447afb81ce89fc9cf1e9d1104675be4ec3103" name="papi-debugsource" arch="i686">
  <version epoch="0" ver="7.2.0" rel="1.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 7.2.0-1" date="1762171200">- Rebase to papi 7.2.0
- Update license tag to BSD-3-Clause
- Remove old patches and add new patches for 7.2.0 compatibility
- Update configure options and package files
- Resolves: RHEL-121673</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 7.2.0-1.1" date="1780574400">- Generate Fortran headers deterministically to fix multilib file
  conflict on papi-devel. (RHEL-145965, RHEL-180678)</changelog>
</package>
<package pkgid="1be5bfc4be5560ce79d0a88eff8e3017a671570648ac2595e6a5ef886d225973" name="papi-debugsource" arch="x86_64">
  <version epoch="0" ver="7.2.0" rel="1.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 7.2.0-1" date="1762171200">- Rebase to papi 7.2.0
- Update license tag to BSD-3-Clause
- Remove old patches and add new patches for 7.2.0 compatibility
- Update configure options and package files
- Resolves: RHEL-121673</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 7.2.0-1.1" date="1780574400">- Generate Fortran headers deterministically to fix multilib file
  conflict on papi-devel. (RHEL-145965, RHEL-180678)</changelog>
</package>
<package pkgid="42f085564bec940b5638bee564e7021c69f0f1c7529e1484ce4871c4dea4d75e" name="papi-libs-debuginfo" arch="i686">
  <version epoch="0" ver="7.2.0" rel="1.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 7.2.0-1" date="1762171200">- Rebase to papi 7.2.0
- Update license tag to BSD-3-Clause
- Remove old patches and add new patches for 7.2.0 compatibility
- Update configure options and package files
- Resolves: RHEL-121673</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 7.2.0-1.1" date="1780574400">- Generate Fortran headers deterministically to fix multilib file
  conflict on papi-devel. (RHEL-145965, RHEL-180678)</changelog>
</package>
<package pkgid="d96b9c66f59fdfb8b87d0ccd94da9293e2e7e6272e7b94cd8bb8bd40f0b9e21b" name="papi-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.2.0" rel="1.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 7.2.0-1" date="1762171200">- Rebase to papi 7.2.0
- Update license tag to BSD-3-Clause
- Remove old patches and add new patches for 7.2.0 compatibility
- Update configure options and package files
- Resolves: RHEL-121673</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 7.2.0-1.1" date="1780574400">- Generate Fortran headers deterministically to fix multilib file
  conflict on papi-devel. (RHEL-145965, RHEL-180678)</changelog>
</package>
<package pkgid="2f6799da4775f573a5b48a6ae7a601d443282b01ce69a059976db8ddc7b45258" name="papi-testsuite-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.2.0" rel="1.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 7.2.0-1" date="1762171200">- Rebase to papi 7.2.0
- Update license tag to BSD-3-Clause
- Remove old patches and add new patches for 7.2.0 compatibility
- Update configure options and package files
- Resolves: RHEL-121673</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 7.2.0-1.1" date="1780574400">- Generate Fortran headers deterministically to fix multilib file
  conflict on papi-devel. (RHEL-145965, RHEL-180678)</changelog>
</package>
<package pkgid="691d9ebe26c26d1aebe6d2be8be588647b798fc5dd25d158ae39eef5e288a36f" name="passt-debuginfo" arch="x86_64">
  <version epoch="0" ver="0^20251210.gd04c480" rel="5.el9_8"/>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20250320.g32f6212-1" date="1742472000">- Resolves: RHEL-84283</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20250512.g8ec1341-1" date="1747137600">- Resolves: RHEL-84283</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20250512.g8ec1341-2" date="1753790400">- Resolves: RHEL-106326</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20250512.g8ec1341-3" date="1761220800">- Resolves: RHEL-123376 RHEL-123438</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251209.gc3f1ba7-1" date="1765281600">- Resolves: RHEL-134119</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251210.gd04c480-1" date="1765368000">- Resolves: RHEL-134942 RHEL-134943</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251210.gd04c480-2" date="1766577600">- Resolves: RHEL-136313 RHEL-136461 RHEL-137439 RHEL-137588</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251210.gd04c480-3" date="1770811200">- Resolves: RHEL-137588 RHEL-136313</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251210.gd04c480-4" date="1776772800">- Resolves: RHEL-169637 RHEL-169639 RHEL-169648</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251210.gd04c480-5" date="1781179200">- Resolves: RHEL-184106 RHEL-183990</changelog>
</package>
<package pkgid="120c170bc52cfc6c77fb0e0fd29401e139763e9afcaa69ef4d46bc0a8a80bd10" name="passt-debuginfo" arch="x86_64">
  <version epoch="0" ver="0^20251210.gd04c480" rel="6.el9_8"/>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20250512.g8ec1341-1" date="1747137600">- Resolves: RHEL-84283</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20250512.g8ec1341-2" date="1753790400">- Resolves: RHEL-106326</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20250512.g8ec1341-3" date="1761220800">- Resolves: RHEL-123376 RHEL-123438</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251209.gc3f1ba7-1" date="1765281600">- Resolves: RHEL-134119</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251210.gd04c480-1" date="1765368000">- Resolves: RHEL-134942 RHEL-134943</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251210.gd04c480-2" date="1766577600">- Resolves: RHEL-136313 RHEL-136461 RHEL-137439 RHEL-137588</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251210.gd04c480-3" date="1770811200">- Resolves: RHEL-137588 RHEL-136313</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251210.gd04c480-4" date="1776772800">- Resolves: RHEL-169637 RHEL-169639 RHEL-169648</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251210.gd04c480-5" date="1781179200">- Resolves: RHEL-184106 RHEL-183990</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251210.gd04c480-6" date="1785067200">- Resolves: RHEL-216654</changelog>
</package>
<package pkgid="160925588faaab919c89d870c33d888e99a48fc0a2f74be0c3af21cd28efcc96" name="passt-debugsource" arch="x86_64">
  <version epoch="0" ver="0^20251210.gd04c480" rel="5.el9_8"/>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20250320.g32f6212-1" date="1742472000">- Resolves: RHEL-84283</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20250512.g8ec1341-1" date="1747137600">- Resolves: RHEL-84283</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20250512.g8ec1341-2" date="1753790400">- Resolves: RHEL-106326</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20250512.g8ec1341-3" date="1761220800">- Resolves: RHEL-123376 RHEL-123438</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251209.gc3f1ba7-1" date="1765281600">- Resolves: RHEL-134119</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251210.gd04c480-1" date="1765368000">- Resolves: RHEL-134942 RHEL-134943</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251210.gd04c480-2" date="1766577600">- Resolves: RHEL-136313 RHEL-136461 RHEL-137439 RHEL-137588</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251210.gd04c480-3" date="1770811200">- Resolves: RHEL-137588 RHEL-136313</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251210.gd04c480-4" date="1776772800">- Resolves: RHEL-169637 RHEL-169639 RHEL-169648</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251210.gd04c480-5" date="1781179200">- Resolves: RHEL-184106 RHEL-183990</changelog>
</package>
<package pkgid="e31620c3ad9a14f34b1cffddbdcb02c807c54c68dde1d203d6276c9419511bbb" name="passt-debugsource" arch="x86_64">
  <version epoch="0" ver="0^20251210.gd04c480" rel="6.el9_8"/>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20250512.g8ec1341-1" date="1747137600">- Resolves: RHEL-84283</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20250512.g8ec1341-2" date="1753790400">- Resolves: RHEL-106326</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20250512.g8ec1341-3" date="1761220800">- Resolves: RHEL-123376 RHEL-123438</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251209.gc3f1ba7-1" date="1765281600">- Resolves: RHEL-134119</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251210.gd04c480-1" date="1765368000">- Resolves: RHEL-134942 RHEL-134943</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251210.gd04c480-2" date="1766577600">- Resolves: RHEL-136313 RHEL-136461 RHEL-137439 RHEL-137588</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251210.gd04c480-3" date="1770811200">- Resolves: RHEL-137588 RHEL-136313</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251210.gd04c480-4" date="1776772800">- Resolves: RHEL-169637 RHEL-169639 RHEL-169648</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251210.gd04c480-5" date="1781179200">- Resolves: RHEL-184106 RHEL-183990</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 0^20251210.gd04c480-6" date="1785067200">- Resolves: RHEL-216654</changelog>
</package>
<package pkgid="9d8c21196f9ff8f96a55af16f5a1eb47c351a208ca3de9873bb05b7a5e0baf3b" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.12.1" date="1779969600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.12.1" date="1782993600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="4da2276b943abb2dbacf2919e768db0227aec7234fe8707fe868985685744ac1" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.15.1" date="1782993600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="50cc61b97cf2f567d8e3a050cff6e60d549c6258a9754367df58d2abbdd44cdd" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.17.1" date="1782993600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="f0dd11811f5225bda8c8ceac958c6ce90af8f28442bf042db3dcddf632e7d903" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.24.1" date="1784030400">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="d47aa4532b4f52fe31d675c7c7c0bf81c34504ed5661aec4c7838d568723173f" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.25.1" date="1784116800">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="284a291a9a538f2205ff2d6632303bdc3cdbd2503c7e5a165bf6ab8aaf769c8b" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944000">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.26.1" date="1784289600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="4211905391bc14719ece4a0cdfb22648654bad5b1657c6008a710ad333cd8577" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.30.1" date="1785153600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.30.1" date="1785240000">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="9699314e0d0c37c3124790acfc5e3b75ef7b50f54ec50a385ef974d1bc4abdb5" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.31.1" date="1785240000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.31.1" date="1785499200">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="bf646c978fdd7796d5635d919fbd41ca0c2cb6b108b819ee63a3253578314f1a" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.33.1" date="1785499200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.33.1" date="1785844800">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="51b3bca75974b85d950aef17584ae3aed8b83c0a6e405e9642ebdb719bc7db79" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.34.1" date="1785844800">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.34.1" date="1786190400">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="046040b551fc47a15127b72c2a4d2721012055bcc78117eccb49c5f295831402" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.36.1" date="1786017600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.36.1" date="1786536000">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="1b5063c14bef530793d88535c8feb206535de3d49e5b353245b163548bbc326c" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.39.1" date="1786622400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.39.1" date="1786881600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="aac19ba32158679f287026d40011128422e35aebd26ec25fb9c5fe9b929f6ac3" name="perftest-debuginfo" arch="x86_64">
  <version epoch="0" ver="25.10.0.0.128" rel="3.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 24.07.0.0.44-1" date="1730894400">- Update to upstream release 24.07.0.0.44
- Resolves: RHEL-66185</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 25.04.0.0.84-1" date="1751544000">- Update to upstream release 25.04.0.0.84
- Resolves: RHEL-99801</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 25.10.0.0.128-1" date="1765368000">- Update to upstream release 25.10.0.0.128
- Resolves: RHEL-134210</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 25.10.0.0.128-2" date="1769169600">- Rebuilt for RHEL-9.8
- Resolves: RHEL-134210</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 25.10.0.0.128-3" date="1769601600">- Fix RDMA CM DMAH bug
- Resolves: RHEL-134210</changelog>
</package>
<package pkgid="4e82aa38e8f2e20d65743ec1fc80a334c679f240dbd7cb1928337d06d4b23878" name="perftest-debugsource" arch="x86_64">
  <version epoch="0" ver="25.10.0.0.128" rel="3.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 24.07.0.0.44-1" date="1730894400">- Update to upstream release 24.07.0.0.44
- Resolves: RHEL-66185</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 25.04.0.0.84-1" date="1751544000">- Update to upstream release 25.04.0.0.84
- Resolves: RHEL-99801</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 25.10.0.0.128-1" date="1765368000">- Update to upstream release 25.10.0.0.128
- Resolves: RHEL-134210</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 25.10.0.0.128-2" date="1769169600">- Rebuilt for RHEL-9.8
- Resolves: RHEL-134210</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 25.10.0.0.128-3" date="1769601600">- Fix RDMA CM DMAH bug
- Resolves: RHEL-134210</changelog>
</package>
<package pkgid="4c786e0d57ec008a119b175c4d24bcf8c07f579819e13c6d74c48b75dabe3911" name="perl-DBI-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.643" rel="9.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.643-9.1" date="1781784000">- Fix possible stack overflow and buffer overflow in DBI.xs
  (CVE-2026-9698)
- Resolves: RHEL-184984</changelog>
</package>
<package pkgid="18517f516899d9791ff9b3e7841cf5832543a6612882fd536e66a579ebd22d12" name="perl-DBI-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.643" rel="9.el9_8.3"/>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.643-9.1" date="1781784000">- Fix possible stack overflow and buffer overflow in DBI.xs
  (CVE-2026-9698)
- Resolves: RHEL-184984</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.643-9.2" date="1783684800">- Set a hard limit of 99999 on '?' placeholders (CVE-2026-14739)
- Resolves: RHEL-193306</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.643-9.3" date="1784203200">- Fix unsafe string eval in DBI::Profile (CVE-2026-14380)
- Resolves: RHEL-211149</changelog>
</package>
<package pkgid="6a63cc7d3c042d7c346077c2d1ef2c9b3d44eef86fb95259dfa6b4e47c6fb808" name="perl-DBI-debugsource" arch="x86_64">
  <version epoch="0" ver="1.643" rel="9.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.643-9.1" date="1781784000">- Fix possible stack overflow and buffer overflow in DBI.xs
  (CVE-2026-9698)
- Resolves: RHEL-184984</changelog>
</package>
<package pkgid="cf5fba861b483548fb76bd380874496b5dfa831f2ac862443891c0dce5ecfd8f" name="perl-DBI-debugsource" arch="x86_64">
  <version epoch="0" ver="1.643" rel="9.el9_8.3"/>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.643-9.1" date="1781784000">- Fix possible stack overflow and buffer overflow in DBI.xs
  (CVE-2026-9698)
- Resolves: RHEL-184984</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.643-9.2" date="1783684800">- Set a hard limit of 99999 on '?' placeholders (CVE-2026-14739)
- Resolves: RHEL-193306</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.643-9.3" date="1784203200">- Fix unsafe string eval in DBI::Profile (CVE-2026-14380)
- Resolves: RHEL-211149</changelog>
</package>
<package pkgid="9f603e032fd6bce27d6a692fae36509102ca056b78b736b052bea29a30e3213d" name="perl-XML-LibXML-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.0206" rel="5.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.0206-5.1" date="1782216000">- Fix out-of-bounds UTF-8 heap read in node name validation
  (CVE-2026-8177)
- Resolves: RHEL-186532</changelog>
</package>
<package pkgid="3608e26632388c8d31dfac9016356ed1683663fb3bf94f1a0b67436bb2fa22b1" name="perl-XML-LibXML-debugsource" arch="x86_64">
  <version epoch="1" ver="2.0206" rel="5.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.0206-5.1" date="1782216000">- Fix out-of-bounds UTF-8 heap read in node name validation
  (CVE-2026-8177)
- Resolves: RHEL-186532</changelog>
</package>
<package pkgid="d08d50b191e87a8a4d51cf46ccd074abe9f0d9af9fbdf2fb1c7940aba8a0aacb" name="perl-ldns-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="12.el9_8.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.7.1-12" date="1733227200">- Fix digest calculation of sha256 (RHEL-20391)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.7.1-12.1" date="1784289600">- Fix CVE-2026-10846: DNS response spoofing via missing
  address/port/TXID and question section validation (RHEL-210701)</changelog>
</package>
<package pkgid="a1f1edf20b81183835308de805406ca72a1fa806737692e354b2beae9dce52fc" name="pipewire-alsa-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.11" rel="1.el9_8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.11-1" date="1778846400">- Rebase to 1.4.11
- Add fixes for CVE-2026-5674
  Resolves: RHEL-164828</changelog>
</package>
<package pkgid="cc802c8e28e58e1607675d18e4b1e3e0d374183607ac6c49e2626c5b5909e4cb" name="pipewire-alsa-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.11" rel="1.el9_8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.11-1" date="1778846400">- Rebase to 1.4.11
- Add fixes for CVE-2026-5674
  Resolves: RHEL-164828</changelog>
</package>
<package pkgid="7570a3a04a27014c13e3f89361024d888c921ce3c7836b6f2dc3806e4b892c67" name="pipewire-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.11" rel="1.el9_8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.11-1" date="1778846400">- Rebase to 1.4.11
- Add fixes for CVE-2026-5674
  Resolves: RHEL-164828</changelog>
</package>
<package pkgid="fdf6fdaa330472fa19ececd039e6a2dd15066743b4ec51d27b25276d1a4566ce" name="pipewire-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.11" rel="1.el9_8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.11-1" date="1778846400">- Rebase to 1.4.11
- Add fixes for CVE-2026-5674
  Resolves: RHEL-164828</changelog>
</package>
<package pkgid="4d23e00fd98022ff786b2b791e0394baae70a4c933612581a309ee8cc980be6a" name="pipewire-debugsource" arch="i686">
  <version epoch="0" ver="1.4.11" rel="1.el9_8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.11-1" date="1778846400">- Rebase to 1.4.11
- Add fixes for CVE-2026-5674
  Resolves: RHEL-164828</changelog>
</package>
<package pkgid="bc732488b1ecba091864217450f03fdb0b8f4cc372c7bd92c6b0a60cf00065e4" name="pipewire-debugsource" arch="x86_64">
  <version epoch="0" ver="1.4.11" rel="1.el9_8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.11-1" date="1778846400">- Rebase to 1.4.11
- Add fixes for CVE-2026-5674
  Resolves: RHEL-164828</changelog>
</package>
<package pkgid="33395149df1288e0b5d829a942dfbeca2f8b478a0d3f6ed5a116cc717045aadb" name="pipewire-gstreamer-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.11" rel="1.el9_8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.11-1" date="1778846400">- Rebase to 1.4.11
- Add fixes for CVE-2026-5674
  Resolves: RHEL-164828</changelog>
</package>
<package pkgid="44712495a0e6c2ca832d5fe583280781c24e91bbf43f991050504cb6afbc3033" name="pipewire-gstreamer-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.11" rel="1.el9_8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.11-1" date="1778846400">- Rebase to 1.4.11
- Add fixes for CVE-2026-5674
  Resolves: RHEL-164828</changelog>
</package>
<package pkgid="151508fc842235cdae07e2f9c94d2493471c6523c64dfbbe631d677edc643fca" name="pipewire-jack-audio-connection-kit-libs-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.11" rel="1.el9_8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.11-1" date="1778846400">- Rebase to 1.4.11
- Add fixes for CVE-2026-5674
  Resolves: RHEL-164828</changelog>
</package>
<package pkgid="28bed96623739bf128108ee6d0bdfd30f0ce39d2cefd00799153c97f6f2ef62b" name="pipewire-jack-audio-connection-kit-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.11" rel="1.el9_8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.11-1" date="1778846400">- Rebase to 1.4.11
- Add fixes for CVE-2026-5674
  Resolves: RHEL-164828</changelog>
</package>
<package pkgid="17f7f8cad4f22a076890eb792cc7c8b2d88f97f1aac5da13e1477999436f5bce" name="pipewire-libs-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.11" rel="1.el9_8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.11-1" date="1778846400">- Rebase to 1.4.11
- Add fixes for CVE-2026-5674
  Resolves: RHEL-164828</changelog>
</package>
<package pkgid="b11f65e6feaf7b86f3c9985b243d5781839cb3d1e26e1e13e77033a5f083686b" name="pipewire-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.11" rel="1.el9_8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.11-1" date="1778846400">- Rebase to 1.4.11
- Add fixes for CVE-2026-5674
  Resolves: RHEL-164828</changelog>
</package>
<package pkgid="e2da8757c8ff03c70434ad0a879f1d9871d9f850ec63f40f3642dafee9881e39" name="pipewire-module-x11-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.11" rel="1.el9_8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.11-1" date="1778846400">- Rebase to 1.4.11
- Add fixes for CVE-2026-5674
  Resolves: RHEL-164828</changelog>
</package>
<package pkgid="12f42e288d0894928e49902b83a0ddc4e04f370dd6e850bd4587c76f4bd85a52" name="pipewire-pulseaudio-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.11" rel="1.el9_8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.11-1" date="1778846400">- Rebase to 1.4.11
- Add fixes for CVE-2026-5674
  Resolves: RHEL-164828</changelog>
</package>
<package pkgid="25d0935aea47a95a925f03fb4e1174966e0d8928797c4f6cb4bd30d59ec4dd73" name="pipewire-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.11" rel="1.el9_8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.11-1" date="1778846400">- Rebase to 1.4.11
- Add fixes for CVE-2026-5674
  Resolves: RHEL-164828</changelog>
</package>
<package pkgid="a6d149252a24e31cb78295b1e9f57a8c5766a31626741206a3556f2464dd7ec1" name="podman-debuginfo" arch="x86_64">
  <version epoch="6" ver="5.8.2" rel="3.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:5.6.1-0.1" date="1755691200">- update to the latest content of https://github.com/containers/podman/tree/v5.6
  (https://github.com/containers/podman/commit/d46b857)
- fixes "Work on RHEL 9.7 packaging"
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:5.6.0-2" date="1755864000">- update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
  (https://github.com/containers/podman/commit/56f1962)
- fixes "Work on RHEL 9.7 packaging"
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.6.0-3" date="1769688000">- update to rhel-9.7.z version of podman
- Resolves: RHEL-142896</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.0-1" date="1771502400">- update to https://github.com/containers/podman/releases/tag/v5.8.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-1" date="1774872000">- update to https://github.com/containers/podman/releases/tag/v5.8.1
- fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day]
- Resolves: RHEL-157746</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-2" date="1775649600">- enable sequoia
- Resolves: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-3" date="1775649601">- revert sequoia - only available in RHEL10
- Related: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-1" date="1776340800">- update to https://github.com/containers/podman/releases/tag/v5.8.2
- fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE
- Resolves: RHEL-165040</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158781</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-3" date="1778155200">- Rebuild for CVE-2026-32283
- Resolves: RHEL-167685</changelog>
</package>
<package pkgid="6b7a508649172ff3f89bfd885bc503b53eb8c4e92850d7b5e62e17ceae10c286" name="podman-debuginfo" arch="x86_64">
  <version epoch="6" ver="5.8.2" rel="4.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:5.6.0-2" date="1755864000">- update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
  (https://github.com/containers/podman/commit/56f1962)
- fixes "Work on RHEL 9.7 packaging"
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.6.0-3" date="1769688000">- update to rhel-9.7.z version of podman
- Resolves: RHEL-142896</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.0-1" date="1771502400">- update to https://github.com/containers/podman/releases/tag/v5.8.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-1" date="1774872000">- update to https://github.com/containers/podman/releases/tag/v5.8.1
- fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day]
- Resolves: RHEL-157746</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-2" date="1775649600">- enable sequoia
- Resolves: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-3" date="1775649601">- revert sequoia - only available in RHEL10
- Related: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-1" date="1776340800">- update to https://github.com/containers/podman/releases/tag/v5.8.2
- fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE
- Resolves: RHEL-165040</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158781</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-3" date="1778155200">- Rebuild for CVE-2026-32283
- Resolves: RHEL-167685</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-4" date="1783512000">- bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829
  CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and
  podman-remote save regression</changelog>
</package>
<package pkgid="11540a9b768e0c65158542bc9ca82e1bd0380b7a05912d4b8f5dcdd13984f677" name="podman-debuginfo" arch="x86_64">
  <version epoch="6" ver="5.8.2" rel="5.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.6.0-3" date="1769688000">- update to rhel-9.7.z version of podman
- Resolves: RHEL-142896</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.0-1" date="1771502400">- update to https://github.com/containers/podman/releases/tag/v5.8.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-1" date="1774872000">- update to https://github.com/containers/podman/releases/tag/v5.8.1
- fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day]
- Resolves: RHEL-157746</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-2" date="1775649600">- enable sequoia
- Resolves: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-3" date="1775649601">- revert sequoia - only available in RHEL10
- Related: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-1" date="1776340800">- update to https://github.com/containers/podman/releases/tag/v5.8.2
- fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE
- Resolves: RHEL-165040</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158781</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-3" date="1778155200">- Rebuild for CVE-2026-32283
- Resolves: RHEL-167685</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-4" date="1783512000">- bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829
  CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and
  podman-remote save regression</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-5" date="1783684800">- rebuild for CVE-2026-39822
- Resolves: RHEL-193646</changelog>
</package>
<package pkgid="17d335279507235894863ac466fc89388d9d4378c1d552ba4a7a1c16e1121554" name="podman-debugsource" arch="x86_64">
  <version epoch="6" ver="5.8.2" rel="3.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:5.6.1-0.1" date="1755691200">- update to the latest content of https://github.com/containers/podman/tree/v5.6
  (https://github.com/containers/podman/commit/d46b857)
- fixes "Work on RHEL 9.7 packaging"
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:5.6.0-2" date="1755864000">- update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
  (https://github.com/containers/podman/commit/56f1962)
- fixes "Work on RHEL 9.7 packaging"
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.6.0-3" date="1769688000">- update to rhel-9.7.z version of podman
- Resolves: RHEL-142896</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.0-1" date="1771502400">- update to https://github.com/containers/podman/releases/tag/v5.8.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-1" date="1774872000">- update to https://github.com/containers/podman/releases/tag/v5.8.1
- fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day]
- Resolves: RHEL-157746</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-2" date="1775649600">- enable sequoia
- Resolves: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-3" date="1775649601">- revert sequoia - only available in RHEL10
- Related: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-1" date="1776340800">- update to https://github.com/containers/podman/releases/tag/v5.8.2
- fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE
- Resolves: RHEL-165040</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158781</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-3" date="1778155200">- Rebuild for CVE-2026-32283
- Resolves: RHEL-167685</changelog>
</package>
<package pkgid="0f978bc8075579e612eba0ea0e337c873700dad8c67385eaf804ac6e1146ac2b" name="podman-debugsource" arch="x86_64">
  <version epoch="6" ver="5.8.2" rel="4.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:5.6.0-2" date="1755864000">- update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
  (https://github.com/containers/podman/commit/56f1962)
- fixes "Work on RHEL 9.7 packaging"
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.6.0-3" date="1769688000">- update to rhel-9.7.z version of podman
- Resolves: RHEL-142896</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.0-1" date="1771502400">- update to https://github.com/containers/podman/releases/tag/v5.8.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-1" date="1774872000">- update to https://github.com/containers/podman/releases/tag/v5.8.1
- fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day]
- Resolves: RHEL-157746</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-2" date="1775649600">- enable sequoia
- Resolves: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-3" date="1775649601">- revert sequoia - only available in RHEL10
- Related: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-1" date="1776340800">- update to https://github.com/containers/podman/releases/tag/v5.8.2
- fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE
- Resolves: RHEL-165040</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158781</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-3" date="1778155200">- Rebuild for CVE-2026-32283
- Resolves: RHEL-167685</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-4" date="1783512000">- bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829
  CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and
  podman-remote save regression</changelog>
</package>
<package pkgid="6fa61b569da9e36dc2b80ed30aed15f31d50a29014e30a78384e67d326470f3d" name="podman-debugsource" arch="x86_64">
  <version epoch="6" ver="5.8.2" rel="5.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.6.0-3" date="1769688000">- update to rhel-9.7.z version of podman
- Resolves: RHEL-142896</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.0-1" date="1771502400">- update to https://github.com/containers/podman/releases/tag/v5.8.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-1" date="1774872000">- update to https://github.com/containers/podman/releases/tag/v5.8.1
- fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day]
- Resolves: RHEL-157746</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-2" date="1775649600">- enable sequoia
- Resolves: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-3" date="1775649601">- revert sequoia - only available in RHEL10
- Related: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-1" date="1776340800">- update to https://github.com/containers/podman/releases/tag/v5.8.2
- fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE
- Resolves: RHEL-165040</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158781</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-3" date="1778155200">- Rebuild for CVE-2026-32283
- Resolves: RHEL-167685</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-4" date="1783512000">- bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829
  CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and
  podman-remote save regression</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-5" date="1783684800">- rebuild for CVE-2026-39822
- Resolves: RHEL-193646</changelog>
</package>
<package pkgid="aba3f16cfabac9a3ed6e6bfa6feacba663ad0c35087bd571357b9063cda35d4a" name="podman-plugins-debuginfo" arch="x86_64">
  <version epoch="6" ver="5.8.2" rel="3.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:5.6.1-0.1" date="1755691200">- update to the latest content of https://github.com/containers/podman/tree/v5.6
  (https://github.com/containers/podman/commit/d46b857)
- fixes "Work on RHEL 9.7 packaging"
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:5.6.0-2" date="1755864000">- update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
  (https://github.com/containers/podman/commit/56f1962)
- fixes "Work on RHEL 9.7 packaging"
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.6.0-3" date="1769688000">- update to rhel-9.7.z version of podman
- Resolves: RHEL-142896</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.0-1" date="1771502400">- update to https://github.com/containers/podman/releases/tag/v5.8.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-1" date="1774872000">- update to https://github.com/containers/podman/releases/tag/v5.8.1
- fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day]
- Resolves: RHEL-157746</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-2" date="1775649600">- enable sequoia
- Resolves: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-3" date="1775649601">- revert sequoia - only available in RHEL10
- Related: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-1" date="1776340800">- update to https://github.com/containers/podman/releases/tag/v5.8.2
- fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE
- Resolves: RHEL-165040</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158781</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-3" date="1778155200">- Rebuild for CVE-2026-32283
- Resolves: RHEL-167685</changelog>
</package>
<package pkgid="7cd146918d84d238d59e1b4c7fc7bffb4f0aeddb4af4389bf60332644a07d167" name="podman-plugins-debuginfo" arch="x86_64">
  <version epoch="6" ver="5.8.2" rel="4.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:5.6.0-2" date="1755864000">- update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
  (https://github.com/containers/podman/commit/56f1962)
- fixes "Work on RHEL 9.7 packaging"
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.6.0-3" date="1769688000">- update to rhel-9.7.z version of podman
- Resolves: RHEL-142896</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.0-1" date="1771502400">- update to https://github.com/containers/podman/releases/tag/v5.8.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-1" date="1774872000">- update to https://github.com/containers/podman/releases/tag/v5.8.1
- fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day]
- Resolves: RHEL-157746</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-2" date="1775649600">- enable sequoia
- Resolves: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-3" date="1775649601">- revert sequoia - only available in RHEL10
- Related: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-1" date="1776340800">- update to https://github.com/containers/podman/releases/tag/v5.8.2
- fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE
- Resolves: RHEL-165040</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158781</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-3" date="1778155200">- Rebuild for CVE-2026-32283
- Resolves: RHEL-167685</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-4" date="1783512000">- bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829
  CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and
  podman-remote save regression</changelog>
</package>
<package pkgid="889c3a3322c9dc8c3b07a9affc47b0118b81becbfd0507fd0c0fd661c79ea784" name="podman-plugins-debuginfo" arch="x86_64">
  <version epoch="6" ver="5.8.2" rel="5.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.6.0-3" date="1769688000">- update to rhel-9.7.z version of podman
- Resolves: RHEL-142896</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.0-1" date="1771502400">- update to https://github.com/containers/podman/releases/tag/v5.8.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-1" date="1774872000">- update to https://github.com/containers/podman/releases/tag/v5.8.1
- fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day]
- Resolves: RHEL-157746</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-2" date="1775649600">- enable sequoia
- Resolves: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-3" date="1775649601">- revert sequoia - only available in RHEL10
- Related: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-1" date="1776340800">- update to https://github.com/containers/podman/releases/tag/v5.8.2
- fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE
- Resolves: RHEL-165040</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158781</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-3" date="1778155200">- Rebuild for CVE-2026-32283
- Resolves: RHEL-167685</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-4" date="1783512000">- bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829
  CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and
  podman-remote save regression</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-5" date="1783684800">- rebuild for CVE-2026-39822
- Resolves: RHEL-193646</changelog>
</package>
<package pkgid="1fcd1a25043740592c0f95b79b3a042b1310d4a0a69ec5ead738cff013965dfd" name="podman-remote-debuginfo" arch="x86_64">
  <version epoch="6" ver="5.8.2" rel="3.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:5.6.1-0.1" date="1755691200">- update to the latest content of https://github.com/containers/podman/tree/v5.6
  (https://github.com/containers/podman/commit/d46b857)
- fixes "Work on RHEL 9.7 packaging"
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:5.6.0-2" date="1755864000">- update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
  (https://github.com/containers/podman/commit/56f1962)
- fixes "Work on RHEL 9.7 packaging"
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.6.0-3" date="1769688000">- update to rhel-9.7.z version of podman
- Resolves: RHEL-142896</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.0-1" date="1771502400">- update to https://github.com/containers/podman/releases/tag/v5.8.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-1" date="1774872000">- update to https://github.com/containers/podman/releases/tag/v5.8.1
- fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day]
- Resolves: RHEL-157746</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-2" date="1775649600">- enable sequoia
- Resolves: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-3" date="1775649601">- revert sequoia - only available in RHEL10
- Related: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-1" date="1776340800">- update to https://github.com/containers/podman/releases/tag/v5.8.2
- fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE
- Resolves: RHEL-165040</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158781</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-3" date="1778155200">- Rebuild for CVE-2026-32283
- Resolves: RHEL-167685</changelog>
</package>
<package pkgid="384d67ef37c82aa4d8e10478fcdbbaa848eb8377a2e0fe8033bbb49e2f756cc5" name="podman-remote-debuginfo" arch="x86_64">
  <version epoch="6" ver="5.8.2" rel="4.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:5.6.0-2" date="1755864000">- update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
  (https://github.com/containers/podman/commit/56f1962)
- fixes "Work on RHEL 9.7 packaging"
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.6.0-3" date="1769688000">- update to rhel-9.7.z version of podman
- Resolves: RHEL-142896</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.0-1" date="1771502400">- update to https://github.com/containers/podman/releases/tag/v5.8.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-1" date="1774872000">- update to https://github.com/containers/podman/releases/tag/v5.8.1
- fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day]
- Resolves: RHEL-157746</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-2" date="1775649600">- enable sequoia
- Resolves: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-3" date="1775649601">- revert sequoia - only available in RHEL10
- Related: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-1" date="1776340800">- update to https://github.com/containers/podman/releases/tag/v5.8.2
- fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE
- Resolves: RHEL-165040</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158781</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-3" date="1778155200">- Rebuild for CVE-2026-32283
- Resolves: RHEL-167685</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-4" date="1783512000">- bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829
  CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and
  podman-remote save regression</changelog>
</package>
<package pkgid="e9d6b2662f6e47b66738da725b2b5527d4107b012bde45fa6c18d25d81f16217" name="podman-remote-debuginfo" arch="x86_64">
  <version epoch="6" ver="5.8.2" rel="5.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.6.0-3" date="1769688000">- update to rhel-9.7.z version of podman
- Resolves: RHEL-142896</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.0-1" date="1771502400">- update to https://github.com/containers/podman/releases/tag/v5.8.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-1" date="1774872000">- update to https://github.com/containers/podman/releases/tag/v5.8.1
- fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day]
- Resolves: RHEL-157746</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-2" date="1775649600">- enable sequoia
- Resolves: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-3" date="1775649601">- revert sequoia - only available in RHEL10
- Related: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-1" date="1776340800">- update to https://github.com/containers/podman/releases/tag/v5.8.2
- fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE
- Resolves: RHEL-165040</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158781</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-3" date="1778155200">- Rebuild for CVE-2026-32283
- Resolves: RHEL-167685</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-4" date="1783512000">- bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829
  CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and
  podman-remote save regression</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-5" date="1783684800">- rebuild for CVE-2026-39822
- Resolves: RHEL-193646</changelog>
</package>
<package pkgid="3aedafe63eb663206ea1f5362decf5c9ba1b028e1598df6908871c81064cabc7" name="podman-tests-debuginfo" arch="x86_64">
  <version epoch="6" ver="5.8.2" rel="3.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:5.6.1-0.1" date="1755691200">- update to the latest content of https://github.com/containers/podman/tree/v5.6
  (https://github.com/containers/podman/commit/d46b857)
- fixes "Work on RHEL 9.7 packaging"
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:5.6.0-2" date="1755864000">- update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
  (https://github.com/containers/podman/commit/56f1962)
- fixes "Work on RHEL 9.7 packaging"
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.6.0-3" date="1769688000">- update to rhel-9.7.z version of podman
- Resolves: RHEL-142896</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.0-1" date="1771502400">- update to https://github.com/containers/podman/releases/tag/v5.8.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-1" date="1774872000">- update to https://github.com/containers/podman/releases/tag/v5.8.1
- fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day]
- Resolves: RHEL-157746</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-2" date="1775649600">- enable sequoia
- Resolves: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-3" date="1775649601">- revert sequoia - only available in RHEL10
- Related: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-1" date="1776340800">- update to https://github.com/containers/podman/releases/tag/v5.8.2
- fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE
- Resolves: RHEL-165040</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158781</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-3" date="1778155200">- Rebuild for CVE-2026-32283
- Resolves: RHEL-167685</changelog>
</package>
<package pkgid="b0fcb26b5a479a5cc5931b33a7fc517f2fd2d7bd7e9af5512afddb42cea4770a" name="podman-tests-debuginfo" arch="x86_64">
  <version epoch="6" ver="5.8.2" rel="4.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:5.6.0-2" date="1755864000">- update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
  (https://github.com/containers/podman/commit/56f1962)
- fixes "Work on RHEL 9.7 packaging"
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.6.0-3" date="1769688000">- update to rhel-9.7.z version of podman
- Resolves: RHEL-142896</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.0-1" date="1771502400">- update to https://github.com/containers/podman/releases/tag/v5.8.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-1" date="1774872000">- update to https://github.com/containers/podman/releases/tag/v5.8.1
- fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day]
- Resolves: RHEL-157746</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-2" date="1775649600">- enable sequoia
- Resolves: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-3" date="1775649601">- revert sequoia - only available in RHEL10
- Related: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-1" date="1776340800">- update to https://github.com/containers/podman/releases/tag/v5.8.2
- fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE
- Resolves: RHEL-165040</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158781</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-3" date="1778155200">- Rebuild for CVE-2026-32283
- Resolves: RHEL-167685</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-4" date="1783512000">- bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829
  CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and
  podman-remote save regression</changelog>
</package>
<package pkgid="72bb6ce697a01a5db6fef2811d7d9759d4f409682bd5dc26f1a3885fbcdb0b4a" name="podman-tests-debuginfo" arch="x86_64">
  <version epoch="6" ver="5.8.2" rel="5.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.6.0-3" date="1769688000">- update to rhel-9.7.z version of podman
- Resolves: RHEL-142896</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.0-1" date="1771502400">- update to https://github.com/containers/podman/releases/tag/v5.8.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-1" date="1774872000">- update to https://github.com/containers/podman/releases/tag/v5.8.1
- fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day]
- Resolves: RHEL-157746</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-2" date="1775649600">- enable sequoia
- Resolves: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.1-3" date="1775649601">- revert sequoia - only available in RHEL10
- Related: RHEL-164019</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-1" date="1776340800">- update to https://github.com/containers/podman/releases/tag/v5.8.2
- fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE
- Resolves: RHEL-165040</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158781</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-3" date="1778155200">- Rebuild for CVE-2026-32283
- Resolves: RHEL-167685</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-4" date="1783512000">- bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829
  CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and
  podman-remote save regression</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8.2-5" date="1783684800">- rebuild for CVE-2026-39822
- Resolves: RHEL-193646</changelog>
</package>
<package pkgid="8a42995241f817d6873efef80304114cc25487b26c3e51f44c1a16891f32ebb3" name="policycoreutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6" rel="5.el9"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-2.1" date="1708344000">- semanage: Allow modifying records on "add"
- semanage: Do not sort local fcontext definitions</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-3" date="1745841600">- restorecond: always add '\0' to ut_user</changelog>
  <changelog author="Veronika Syncakova &lt;vsyncako@redhat.com&gt; - 3.6-4" date="1768478400">- semanage: Reset active value when deleting boolean customizations</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-5" date="1770120000">- sandbox/seunshare: Replace system() with execv() to prevent shell injection
- seunshare: fix the frail tmpdir cleanup</changelog>
</package>
<package pkgid="3e9408076afeb1f5be8e0a618cf327d116e7ad003e855bd7fd91429d696fa10d" name="policycoreutils-newrole-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6" rel="5.el9"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-2.1" date="1708344000">- semanage: Allow modifying records on "add"
- semanage: Do not sort local fcontext definitions</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-3" date="1745841600">- restorecond: always add '\0' to ut_user</changelog>
  <changelog author="Veronika Syncakova &lt;vsyncako@redhat.com&gt; - 3.6-4" date="1768478400">- semanage: Reset active value when deleting boolean customizations</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-5" date="1770120000">- sandbox/seunshare: Replace system() with execv() to prevent shell injection
- seunshare: fix the frail tmpdir cleanup</changelog>
</package>
<package pkgid="1bea1fb4e1defc678efb0ca58f2a548f63d3737caf4034257dc212c66f905c75" name="policycoreutils-restorecond-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6" rel="5.el9"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-2.1" date="1708344000">- semanage: Allow modifying records on "add"
- semanage: Do not sort local fcontext definitions</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-3" date="1745841600">- restorecond: always add '\0' to ut_user</changelog>
  <changelog author="Veronika Syncakova &lt;vsyncako@redhat.com&gt; - 3.6-4" date="1768478400">- semanage: Reset active value when deleting boolean customizations</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-5" date="1770120000">- sandbox/seunshare: Replace system() with execv() to prevent shell injection
- seunshare: fix the frail tmpdir cleanup</changelog>
</package>
<package pkgid="861853c05e2b83006a98adc41e6b17c7c6add5c77df6d5b41de2a57f215d358e" name="poppler-cpp-debuginfo" arch="i686">
  <version epoch="0" ver="21.01.0" rel="24.el9_8.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-21" date="1721995200">- Fix crash in broken documents when using -dests
- Resolves: RHEL-44333</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-22" date="1765800000">- Check bitmap in combine()
- Resolves: RHEL-131795, RHEL-131792</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-23" date="1765972800">- Bump release for build inheritance
- Resolves: RHEL-131792</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-24" date="1766404800">- Fix pdfsig's man page
- Resolves: RHEL-126070</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-24.el9_8.1" date="1780228800">- Fix integer overflow in tilingPatternFill (CVE-2026-10118)
- Resolves: RHEL-180580</changelog>
</package>
<package pkgid="a5b3193b6b9727a71a02b60957243d458681e0eb0c53c2484fbf46f8dc450faf" name="poppler-cpp-debuginfo" arch="x86_64">
  <version epoch="0" ver="21.01.0" rel="24.el9_8.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-21" date="1721995200">- Fix crash in broken documents when using -dests
- Resolves: RHEL-44333</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-22" date="1765800000">- Check bitmap in combine()
- Resolves: RHEL-131795, RHEL-131792</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-23" date="1765972800">- Bump release for build inheritance
- Resolves: RHEL-131792</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-24" date="1766404800">- Fix pdfsig's man page
- Resolves: RHEL-126070</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-24.el9_8.1" date="1780228800">- Fix integer overflow in tilingPatternFill (CVE-2026-10118)
- Resolves: RHEL-180580</changelog>
</package>
<package pkgid="f0f00b67b48b809e9af2a0a6901cf66ad3db5b49ce06ee310ecc842dc03c837e" name="poppler-debuginfo" arch="i686">
  <version epoch="0" ver="21.01.0" rel="24.el9_8.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-21" date="1721995200">- Fix crash in broken documents when using -dests
- Resolves: RHEL-44333</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-22" date="1765800000">- Check bitmap in combine()
- Resolves: RHEL-131795, RHEL-131792</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-23" date="1765972800">- Bump release for build inheritance
- Resolves: RHEL-131792</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-24" date="1766404800">- Fix pdfsig's man page
- Resolves: RHEL-126070</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-24.el9_8.1" date="1780228800">- Fix integer overflow in tilingPatternFill (CVE-2026-10118)
- Resolves: RHEL-180580</changelog>
</package>
<package pkgid="b126e91d7d764c37c751a7bb3cea11507eacae2e53b015925e69fe1ab7aa972a" name="poppler-debuginfo" arch="x86_64">
  <version epoch="0" ver="21.01.0" rel="24.el9_8.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-21" date="1721995200">- Fix crash in broken documents when using -dests
- Resolves: RHEL-44333</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-22" date="1765800000">- Check bitmap in combine()
- Resolves: RHEL-131795, RHEL-131792</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-23" date="1765972800">- Bump release for build inheritance
- Resolves: RHEL-131792</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-24" date="1766404800">- Fix pdfsig's man page
- Resolves: RHEL-126070</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-24.el9_8.1" date="1780228800">- Fix integer overflow in tilingPatternFill (CVE-2026-10118)
- Resolves: RHEL-180580</changelog>
</package>
<package pkgid="f2a9731e3a7adac49d28e210e3a55e1c3030896f8ca7eeb3341108605c50ebae" name="poppler-debugsource" arch="i686">
  <version epoch="0" ver="21.01.0" rel="24.el9_8.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-21" date="1721995200">- Fix crash in broken documents when using -dests
- Resolves: RHEL-44333</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-22" date="1765800000">- Check bitmap in combine()
- Resolves: RHEL-131795, RHEL-131792</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-23" date="1765972800">- Bump release for build inheritance
- Resolves: RHEL-131792</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-24" date="1766404800">- Fix pdfsig's man page
- Resolves: RHEL-126070</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-24.el9_8.1" date="1780228800">- Fix integer overflow in tilingPatternFill (CVE-2026-10118)
- Resolves: RHEL-180580</changelog>
</package>
<package pkgid="cb0699ef2ab6e4a75619630a52c71b5ed6d0e285f730b22f82deb43eaad6d35c" name="poppler-debugsource" arch="x86_64">
  <version epoch="0" ver="21.01.0" rel="24.el9_8.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-21" date="1721995200">- Fix crash in broken documents when using -dests
- Resolves: RHEL-44333</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-22" date="1765800000">- Check bitmap in combine()
- Resolves: RHEL-131795, RHEL-131792</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-23" date="1765972800">- Bump release for build inheritance
- Resolves: RHEL-131792</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-24" date="1766404800">- Fix pdfsig's man page
- Resolves: RHEL-126070</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-24.el9_8.1" date="1780228800">- Fix integer overflow in tilingPatternFill (CVE-2026-10118)
- Resolves: RHEL-180580</changelog>
</package>
<package pkgid="445b7b909dbfc728a482dbb6cee80d7c6cf778026768cd7a50e8047ed26da043" name="poppler-glib-debuginfo" arch="i686">
  <version epoch="0" ver="21.01.0" rel="24.el9_8.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-21" date="1721995200">- Fix crash in broken documents when using -dests
- Resolves: RHEL-44333</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-22" date="1765800000">- Check bitmap in combine()
- Resolves: RHEL-131795, RHEL-131792</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-23" date="1765972800">- Bump release for build inheritance
- Resolves: RHEL-131792</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-24" date="1766404800">- Fix pdfsig's man page
- Resolves: RHEL-126070</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-24.el9_8.1" date="1780228800">- Fix integer overflow in tilingPatternFill (CVE-2026-10118)
- Resolves: RHEL-180580</changelog>
</package>
<package pkgid="5843411b624a129cc16ab30142e39bf0e93a0330e7a3a8604a7fd20200e4f36e" name="poppler-glib-debuginfo" arch="x86_64">
  <version epoch="0" ver="21.01.0" rel="24.el9_8.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-21" date="1721995200">- Fix crash in broken documents when using -dests
- Resolves: RHEL-44333</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-22" date="1765800000">- Check bitmap in combine()
- Resolves: RHEL-131795, RHEL-131792</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-23" date="1765972800">- Bump release for build inheritance
- Resolves: RHEL-131792</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-24" date="1766404800">- Fix pdfsig's man page
- Resolves: RHEL-126070</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-24.el9_8.1" date="1780228800">- Fix integer overflow in tilingPatternFill (CVE-2026-10118)
- Resolves: RHEL-180580</changelog>
</package>
<package pkgid="14af3cf762a4b3c1c0d8dbf1944daa80023a413a9ed4b32e00173a6491f008c0" name="poppler-qt5-debuginfo" arch="i686">
  <version epoch="0" ver="21.01.0" rel="24.el9_8.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-21" date="1721995200">- Fix crash in broken documents when using -dests
- Resolves: RHEL-44333</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-22" date="1765800000">- Check bitmap in combine()
- Resolves: RHEL-131795, RHEL-131792</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-23" date="1765972800">- Bump release for build inheritance
- Resolves: RHEL-131792</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-24" date="1766404800">- Fix pdfsig's man page
- Resolves: RHEL-126070</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-24.el9_8.1" date="1780228800">- Fix integer overflow in tilingPatternFill (CVE-2026-10118)
- Resolves: RHEL-180580</changelog>
</package>
<package pkgid="cfa84bbdb07caf01e0e08e3d74fb140103d6c8c3fe515c6753133ae0ef7e2727" name="poppler-qt5-debuginfo" arch="x86_64">
  <version epoch="0" ver="21.01.0" rel="24.el9_8.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-21" date="1721995200">- Fix crash in broken documents when using -dests
- Resolves: RHEL-44333</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-22" date="1765800000">- Check bitmap in combine()
- Resolves: RHEL-131795, RHEL-131792</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-23" date="1765972800">- Bump release for build inheritance
- Resolves: RHEL-131792</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-24" date="1766404800">- Fix pdfsig's man page
- Resolves: RHEL-126070</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-24.el9_8.1" date="1780228800">- Fix integer overflow in tilingPatternFill (CVE-2026-10118)
- Resolves: RHEL-180580</changelog>
</package>
<package pkgid="78027dcbbaded7000a40675e95a47ba55ebd84b008d633ae4cadc3ef0b177b67" name="poppler-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="21.01.0" rel="24.el9_8.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-21" date="1721995200">- Fix crash in broken documents when using -dests
- Resolves: RHEL-44333</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-22" date="1765800000">- Check bitmap in combine()
- Resolves: RHEL-131795, RHEL-131792</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-23" date="1765972800">- Bump release for build inheritance
- Resolves: RHEL-131792</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-24" date="1766404800">- Fix pdfsig's man page
- Resolves: RHEL-126070</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 21.01.0-24.el9_8.1" date="1780228800">- Fix integer overflow in tilingPatternFill (CVE-2026-10118)
- Resolves: RHEL-180580</changelog>
</package>
<package pkgid="516e6100ce99772c0d2dba7eb9c439cfd22ec0320e160a3313a1da65d5e6e2b6" name="postfix-cdb-debuginfo" arch="x86_64">
  <version epoch="2" ver="3.5.25" rel="3.el9_8"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2:3.5.25-1" date="1721304000">- New version
  Resolves: RHEL-20023
- Dropped upstreamed patches</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 2:3.5.25-2" date="1767700800">- Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
  RHEL-128018</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 2:3.5.25-3" date="1779364800">- Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code.
  Resolves: RHEL-176550</changelog>
</package>
<package pkgid="17939568bf9e586ae178beff73c209d905e9aff4f7c72cdfcb2afdbf2e1b33d5" name="postfix-debuginfo" arch="x86_64">
  <version epoch="2" ver="3.5.25" rel="3.el9_8"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2:3.5.25-1" date="1721304000">- New version
  Resolves: RHEL-20023
- Dropped upstreamed patches</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 2:3.5.25-2" date="1767700800">- Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
  RHEL-128018</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 2:3.5.25-3" date="1779364800">- Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code.
  Resolves: RHEL-176550</changelog>
</package>
<package pkgid="be4cb331808ccd70c0f2b142e44bfca9e469e37a45891cdf3e8146e0e17471b1" name="postfix-debugsource" arch="x86_64">
  <version epoch="2" ver="3.5.25" rel="3.el9_8"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2:3.5.25-1" date="1721304000">- New version
  Resolves: RHEL-20023
- Dropped upstreamed patches</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 2:3.5.25-2" date="1767700800">- Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
  RHEL-128018</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 2:3.5.25-3" date="1779364800">- Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code.
  Resolves: RHEL-176550</changelog>
</package>
<package pkgid="39792a17e38355c3b4253a9c7e26d3fa5e4a21a662c8df4fc5d3bf295e75faeb" name="postfix-ldap-debuginfo" arch="x86_64">
  <version epoch="2" ver="3.5.25" rel="3.el9_8"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2:3.5.25-1" date="1721304000">- New version
  Resolves: RHEL-20023
- Dropped upstreamed patches</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 2:3.5.25-2" date="1767700800">- Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
  RHEL-128018</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 2:3.5.25-3" date="1779364800">- Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code.
  Resolves: RHEL-176550</changelog>
</package>
<package pkgid="22efd410e2eb89466530a9d51c1a3000939d6b29a2280d304c24986022ad3bf5" name="postfix-lmdb-debuginfo" arch="x86_64">
  <version epoch="2" ver="3.5.25" rel="3.el9_8"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2:3.5.25-1" date="1721304000">- New version
  Resolves: RHEL-20023
- Dropped upstreamed patches</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 2:3.5.25-2" date="1767700800">- Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
  RHEL-128018</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 2:3.5.25-3" date="1779364800">- Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code.
  Resolves: RHEL-176550</changelog>
</package>
<package pkgid="1e9cb50d9c895899681302e0c8de67182803aff8947a7a7536559fe71f177ead" name="postfix-mysql-debuginfo" arch="x86_64">
  <version epoch="2" ver="3.5.25" rel="3.el9_8"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2:3.5.25-1" date="1721304000">- New version
  Resolves: RHEL-20023
- Dropped upstreamed patches</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 2:3.5.25-2" date="1767700800">- Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
  RHEL-128018</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 2:3.5.25-3" date="1779364800">- Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code.
  Resolves: RHEL-176550</changelog>
</package>
<package pkgid="ee75acd80eb40870ceff67dd06e5b9ea32042532cf75a1f417a63e4c414c9dbe" name="postfix-pcre-debuginfo" arch="x86_64">
  <version epoch="2" ver="3.5.25" rel="3.el9_8"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2:3.5.25-1" date="1721304000">- New version
  Resolves: RHEL-20023
- Dropped upstreamed patches</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 2:3.5.25-2" date="1767700800">- Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
  RHEL-128018</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 2:3.5.25-3" date="1779364800">- Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code.
  Resolves: RHEL-176550</changelog>
</package>
<package pkgid="90751c9f5e2c8f1b06d7149eb93a44079f0bccc46bb77efe2f20280eb338b351" name="postfix-pgsql-debuginfo" arch="x86_64">
  <version epoch="2" ver="3.5.25" rel="3.el9_8"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2:3.5.25-1" date="1721304000">- New version
  Resolves: RHEL-20023
- Dropped upstreamed patches</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 2:3.5.25-2" date="1767700800">- Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
  RHEL-128018</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 2:3.5.25-3" date="1779364800">- Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code.
  Resolves: RHEL-176550</changelog>
</package>
<package pkgid="7b9e7c31aa90582b275e06f070b53e4907610a62c83647eba6068a252c07e31c" name="postfix-sqlite-debuginfo" arch="x86_64">
  <version epoch="2" ver="3.5.25" rel="3.el9_8"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2:3.5.25-1" date="1721304000">- New version
  Resolves: RHEL-20023
- Dropped upstreamed patches</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 2:3.5.25-2" date="1767700800">- Added a RHEL-specific patch to remove an OpenSSL version mismatch warning.
  RHEL-128018</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 2:3.5.25-3" date="1779364800">- Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code.
  Resolves: RHEL-176550</changelog>
</package>
<package pkgid="d99866d61bd0b4a373dd11b79a4e3d115b7c1ef7f0f0d580bfbf4eacc345be4f" name="pqrpm-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.19.1.1" rel="6.el9"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-1" date="1754308800">- Initial commit on c9s (RHEL-84699)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-2" date="1755172800">- Add signing support (RHEL-107536)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-3" date="1756123200">- Additional PQC-related fixes (RHEL-109233)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-4" date="1756209600">- Fix rpmsign(8) man page (RHEL-109233)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-5" date="1770033600">- Ignore signatures made by unknown or disabled algorithms (RHEL-112700)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-6" date="1770292800">- Fix key import API to return NOTTRUSTED for disabled algorithms (RHEL-112700)</changelog>
</package>
<package pkgid="353b176407f7ea78b6b02230236448457d62427899a8676207a07907af2d8b2a" name="pqrpm-debugsource" arch="x86_64">
  <version epoch="0" ver="4.19.1.1" rel="6.el9"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-1" date="1754308800">- Initial commit on c9s (RHEL-84699)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-2" date="1755172800">- Add signing support (RHEL-107536)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-3" date="1756123200">- Additional PQC-related fixes (RHEL-109233)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-4" date="1756209600">- Fix rpmsign(8) man page (RHEL-109233)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-5" date="1770033600">- Ignore signatures made by unknown or disabled algorithms (RHEL-112700)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-6" date="1770292800">- Fix key import API to return NOTTRUSTED for disabled algorithms (RHEL-112700)</changelog>
</package>
<package pkgid="453326d008a1f3da629e48bf0c33609eec264f516b011909d77e1a475f323490" name="pqrpm-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.19.1.1" rel="6.el9"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-1" date="1754308800">- Initial commit on c9s (RHEL-84699)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-2" date="1755172800">- Add signing support (RHEL-107536)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-3" date="1756123200">- Additional PQC-related fixes (RHEL-109233)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-4" date="1756209600">- Fix rpmsign(8) man page (RHEL-109233)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-5" date="1770033600">- Ignore signatures made by unknown or disabled algorithms (RHEL-112700)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-6" date="1770292800">- Fix key import API to return NOTTRUSTED for disabled algorithms (RHEL-112700)</changelog>
</package>
<package pkgid="6ff6e1f05a8edceb0e0faddfcf46a0b7969d5ee6082a89dd05af3d9ad2c3726a" name="python3-capstone-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="13.el9_8"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 4.0.2-11" date="1773316800">- Fix CVE-2025-68114 (memory corruption) and CVE-2025-67873 (heap buffer overflow)
  Resolves: RHEL-137760</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 4.0.2-12" date="1775131200">- Rebuild for rhel-9.8
  Resolves: RHEL-137760</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 4.0.2-13" date="1779796800">- Rebuild for rhel-9.8.z</changelog>
</package>
<package pkgid="b9edc68c7575fdc455d0c1ff275adb447bef3ab477554f1eaf2acfc01e20de12" name="python3-hawkey-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="18.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-13" date="1738756800">- Add persistence configuration option (RHEL-78024)</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.69.0-14" date="1741780800">- module: Warn if module config file is inaccessible (RHEL-62833)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.69.0-15" date="1750939200">- history DB: Add "persistence" column (RHEL-100623)
- conf: Add bootc_unsafe_paths (RHEL-100622)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.69.0-16" date="1751284800">- Introduce $releasever_major, $releasever_minor variables, shell-style
  variable substitution (RHEL-95006)</changelog>
  <changelog author="Matej Focko &lt;mfocko@redhat.com&gt; - 0.69.0-17" date="1770120000">- Fix comparison of RPM items in the transaction (RHEL-81779)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 0.69.0-18" date="1770638400">- Fix a crash when parsing multiple key files fails (RHEL-145618)
- Mark all protected packages as user installed for all transactions (RHEL-76112)
- Add `filterUnneededExtraUserinstalled` and Python version to the API
- Describe all problems even when there are protected removals (RHEL-115194)
- Clearer error for protected package broken dependencies</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 0.69.0-18" date="1782302400">- Add Navix bugtracker</changelog>
</package>
<package pkgid="6bb4c1ae12a698859aee9ba178acb18a06a67f2dbf4049802c197a5c58f2f0ae" name="python3-iscsi-initiator-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.2.1.11" rel="1.git4b3e853.el9_8.2"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-0.git4b3e853" date="1746619200">- Open-iSCSI upstream 2.1.11</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-1.git4b3e853" date="1782388800">- fix regression in fw and static node records</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.1" date="1785412800">- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.2" date="1785412801">- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass</changelog>
</package>
<package pkgid="74239651e93eef781c7f2803b75cce70758b75a1d51c81dc19026b48579bf5c8" name="python3-ldb-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="4ba08944ec06c1fdbf926bd38c70b3238518bfad0b1c18a4f6fe84e69c5556a0" name="python3-ldb-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="31d824282e37e3006b5219be7951892407a749717627032e96dd358b96cbbdf5" name="python3-ldns-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="12.el9_8.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.7.1-12" date="1733227200">- Fix digest calculation of sha256 (RHEL-20391)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.7.1-12.1" date="1784289600">- Fix CVE-2026-10846: DNS response spoofing via missing
  address/port/TXID and question section validation (RHEL-210701)</changelog>
</package>
<package pkgid="b7a6322c6ab3ded7c950cd90174d8972f179e9e61bfd031589240c8826a80725" name="python3-libdnf-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.69.0" rel="18.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.69.0-13" date="1738756800">- Add persistence configuration option (RHEL-78024)</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.69.0-14" date="1741780800">- module: Warn if module config file is inaccessible (RHEL-62833)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.69.0-15" date="1750939200">- history DB: Add "persistence" column (RHEL-100623)
- conf: Add bootc_unsafe_paths (RHEL-100622)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.69.0-16" date="1751284800">- Introduce $releasever_major, $releasever_minor variables, shell-style
  variable substitution (RHEL-95006)</changelog>
  <changelog author="Matej Focko &lt;mfocko@redhat.com&gt; - 0.69.0-17" date="1770120000">- Fix comparison of RPM items in the transaction (RHEL-81779)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 0.69.0-18" date="1770638400">- Fix a crash when parsing multiple key files fails (RHEL-145618)
- Mark all protected packages as user installed for all transactions (RHEL-76112)
- Add `filterUnneededExtraUserinstalled` and Python version to the API
- Describe all problems even when there are protected removals (RHEL-115194)
- Clearer error for protected package broken dependencies</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 0.69.0-18" date="1782302400">- Add Navix bugtracker</changelog>
</package>
<package pkgid="b48e7f933780cac2a84513415f329a554cfe9a726e4f2725eb5ae4a3dd333f92" name="python3-libipa_hbac-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="da58e4cc8f3f1944e0af076bf61ca11aaf21ca417411acc12357b0d74b1619b7" name="python3-libipa_hbac-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="e2e174605157c309b209d5d64b32bcd9c6c4c88715ec130c37fa7c4a325a8816" name="python3-librepo-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.19.0" rel="1.el9"/>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 1.14.5-3" date="1750766400">- Propagate return value from prepare_repo_download_targets (RHEL-85607)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.19.0-1" date="1764244800">- Rebase to 1.19.0 (RHEL-62033)</changelog>
</package>
<package pkgid="deb7f9a3577fd600cc5bc3129ba7292f28ad58a62956719a7196af8db8fc6dca" name="python3-libsss_nss_idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="49fd8e0745651be5b47b4393c7f8bc243bd5721aed32235e6717ab4f4272cae1" name="python3-libsss_nss_idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="8b2a2fc9b8a583d2c436e3466eddc0e404dde7085d8d518c09bccd5796b1e2f1" name="python3-libxml2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
</package>
<package pkgid="97bdb86829ed95c45ff84681bcc4e95ee9e5f5b15887a58c3ecc906b2db22953" name="python3-libxml2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.2"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.2" date="1781611200">- Fix CVE-2025-6170 (RHEL-182016)</changelog>
</package>
<package pkgid="ef2f4587aae53dbe6f0e180758512aaa02a77b109cfe1dbadfc8842332c2b095" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.12.1" date="1779969600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.12.1" date="1782993600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="4876d320d68e9d34a970f8de9fef77239722204cd963304bb3ae421f599002f8" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.15.1" date="1782993600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="9aa7fa7c94d360c37e739cf9e9104dd12ddc4ab6adc8ad03b19ae98b425f1304" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.17.1" date="1782993600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="75523b9a2cb5488ccd441b7673257511a2eda4585b129052d9a62b73a2391dc4" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.24.1" date="1784030400">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="c529096ec1833ec3fd699662f2799c1d47663aa101f3081c0c49d638f6df23a4" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216000">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.25.1" date="1784116800">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="c56af59fb6b5f376579184b61c0d60b0c29bd25a0a3847affda783897fb921e5" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734400">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944000">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.26.1" date="1784289600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="8f526765ddc2911f5f08e2afd67ecde0d0937c14bc228aee56f7cf5409c54292" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.30.1" date="1785153600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.30.1" date="1785240000">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="e999d7e2bea23a4696af195619aa39f60cacd0cd64f47420eceaba6d7b7548c3" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.31.1" date="1785240000">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.31.1" date="1785499200">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="866821b8990820742ec10b1334181bfd139ecebe5ee6474f11da38006db2e787" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.33.1" date="1785499200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.33.1" date="1785844800">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="8c4d67b6f6d0f58e0264405ccc0e6261c899e938ae0c2aa6efe435297522b665" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.34.1" date="1785844800">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.34.1" date="1786190400">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="abf9e333ca758da1aa596f2abd9c72d5f2befe758051baf1067da823734315cd" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.36.1" date="1786017600">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.36.1" date="1786536000">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="841755a4e1009c7249b8f25f306342040ee06cd8edb6c3e724c63d8b31ff486d" name="python3-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.14.0-687.39.1" date="1786622400">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Ensure appended release in sbat is removed</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 5.14.0-687.39.1" date="1786881600">- kernel/rh_shadowman: add navix logo
- add Navix certificates</changelog>
</package>
<package pkgid="a9cc3010987b1c748c827df3c2f69ebe9282e1220b7b66cb92269858473bff28" name="python3-rrdtool-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="22.el9_8"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.7.2-22" date="1779278400">- Fixed stack buffer overflow in rrdcached and added more security checks
  Resolves: RHEL-173257</changelog>
</package>
<package pkgid="11f884c3b3d12059bf8e6fb23520f2da0eae61350b9d995e7e57891fc6e6d5d5" name="python3-samba-dc-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="707787fe400d6cc3943b1985e523c96350e99b75c960a8f67cf057e2a1df3673" name="python3-samba-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="bbac07af098a86389d0e7ee86c47b36dd1cb26a876eacca1deef9f1416b672ec" name="python3-samba-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="e34091afbcc0b2977aec0b67b159a044873fddd524f6178cd9f0327c6c141e50" name="python3-solv-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="5.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
</package>
<package pkgid="56d62a0df415237acf4920d1eb54e957946cebd9b93c1337c9af6d7a6b9b0205" name="python3-solv-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="6.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.7.24-6" date="1780660800">- Fix a buffer overflow when decompressing solv pages (CVE-2026-48864)
  (RHEL-178982)</changelog>
</package>
<package pkgid="00d1819428741208b277e7689de89d89d20c95734f8e318b4ea1f22a4d2bd8c5" name="python3-sss-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="3a857b52c529774d1fec17090111b9164f02c1dbf47a8b169cab915f290245fa" name="python3-sss-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="8f89899480cd7d5c0e157ada8a5987c2a163e039f37941e573764ca874181f09" name="python3-sss-murmur-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="22f2b7f248c6b0539a4346ce48e10aa5e9dc554426d5f0d1b48f3541f8fff67d" name="python3-sss-murmur-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="62c1f3543834bd6f22d9f41087fac794a72f46badc3abe44b4747a973c927458" name="python3-unbound-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.24.2" rel="3.el9_8.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-18" date="1747224000">- Prevent unbounded name compression (CVE-2024-8508)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-19" date="1750766400">- Fix regression on update introduced by local-root symlink
- Resolves: RHEL-92255</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-20" date="1752667200">- Fix verification of unbound-control key files
- Resolves: RHEL-65396</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-21" date="1753704000">- Fix RebirthDay Attack (CVE-2025-5994)
- Resolves: RHEL-104129</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-22" date="1762862400">- Create root key if missing automatically (RHEL-127540)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-23" date="1762862401">- Do not verify root.key in libs (RHEL-64339)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-24" date="1762862402">- Add new root key 38696 (RHEL-77716)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.24.2-2" date="1770638400">- Switch TLS configuration to follow TLS sockets by crypto-policy again
  (RHEL-147860)
- Change the default of tls-use-system-policy-versions at build-time</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.24.2-3" date="1772020800">- Install correct trust anchor source in Image Mode (RHEL-127540)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 1.24.2-3.1" date="1779710400">- Fix CVE-2026-33278 (RHEL‑177822)
  Fix CVE-2026-42944 (RHEL-177936)
  Fix CVE-2026-42959 (RHEL-177797)</changelog>
</package>
<package pkgid="a5bd6a4ab5684bb337344d5ca50871c34684ffce9d2e46af860817d0cb2b9347" name="python3-unbound-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.24.2" rel="3.el9_8.2"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-19" date="1750766400">- Fix regression on update introduced by local-root symlink
- Resolves: RHEL-92255</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-20" date="1752667200">- Fix verification of unbound-control key files
- Resolves: RHEL-65396</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-21" date="1753704000">- Fix RebirthDay Attack (CVE-2025-5994)
- Resolves: RHEL-104129</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-22" date="1762862400">- Create root key if missing automatically (RHEL-127540)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-23" date="1762862401">- Do not verify root.key in libs (RHEL-64339)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-24" date="1762862402">- Add new root key 38696 (RHEL-77716)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.24.2-2" date="1770638400">- Switch TLS configuration to follow TLS sockets by crypto-policy again
  (RHEL-147860)
- Change the default of tls-use-system-policy-versions at build-time</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.24.2-3" date="1772020800">- Install correct trust anchor source in Image Mode (RHEL-127540)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 1.24.2-3.1" date="1779710400">- Fix CVE-2026-33278 (RHEL-177822)
  Fix CVE-2026-42944 (RHEL-177936)
  Fix CVE-2026-42959 (RHEL-177797)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 1.24.2-3.2" date="1782129600">- Fix CVE-2026-40622 (RHEL-184840)
  Fix CVE-2026-44390 (RHEL-186688)
  Fix CVE-2026-41292 (RHEL-187352)
  Fix CVE-2026-42534 (RHEL-187095)</changelog>
</package>
<package pkgid="f0872b4e75bc41846f6528ba29360948a2537ecb7ea30714286dbfbe61f76a48" name="python3.11-debuginfo" arch="i686">
  <version epoch="0" ver="3.11.13" rel="10.el9_8"/>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.11.13-1" date="1749038400">- Update to 3.11.13
- Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.13-2" date="1753272000">- Fix PySSL_SetError handling SSL_ERROR_SYSCALL
- This fixes random flakiness of test_ssl on stressed machines
Resolves: RHEL-101551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.13-3" date="1755777600">- Security fix for CVE-2025-8194
Resolves: RHEL-106365</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.11.13-4" date="1768219200">- Security fix for CVE-2025-12084
Resolves: RHEL-135395</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.11.13-5" date="1768564800">- Security fix for CVE-2025-13836
Resolves: RHEL-141025</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.11.13-6" date="1772193600">- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143110
Resolves: RHEL-143170
Resolves: RHEL-144894</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.11.13-7" date="1773057600">- Rebuilding previous fixes for different build target
Related: RHEL-143110, RHEL-143170, RHEL-144894</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.11.13-8" date="1774526400">- Security fix for CVE-2026-4519
Resolves: RHEL-158053</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.13-9" date="1776427200">- Security fixes for CVE-2026-4786, CVE-2026-6100
Resolves: RHEL-168158, RHEL-167916</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.11.13-10" date="1780315200">- Depend on sqlite-libs with (de)serialize API
Resolves: RHEL-178519</changelog>
</package>
<package pkgid="487162d3f148d73e4a1c4e9c34c1d9a33d79e83ac52e0c60667d1890ab5619ad" name="python3.11-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.11.13" rel="10.el9_8"/>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.11.13-1" date="1749038400">- Update to 3.11.13
- Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.13-2" date="1753272000">- Fix PySSL_SetError handling SSL_ERROR_SYSCALL
- This fixes random flakiness of test_ssl on stressed machines
Resolves: RHEL-101551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.13-3" date="1755777600">- Security fix for CVE-2025-8194
Resolves: RHEL-106365</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.11.13-4" date="1768219200">- Security fix for CVE-2025-12084
Resolves: RHEL-135395</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.11.13-5" date="1768564800">- Security fix for CVE-2025-13836
Resolves: RHEL-141025</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.11.13-6" date="1772193600">- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143110
Resolves: RHEL-143170
Resolves: RHEL-144894</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.11.13-7" date="1773057600">- Rebuilding previous fixes for different build target
Related: RHEL-143110, RHEL-143170, RHEL-144894</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.11.13-8" date="1774526400">- Security fix for CVE-2026-4519
Resolves: RHEL-158053</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.13-9" date="1776427200">- Security fixes for CVE-2026-4786, CVE-2026-6100
Resolves: RHEL-168158, RHEL-167916</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.11.13-10" date="1780315200">- Depend on sqlite-libs with (de)serialize API
Resolves: RHEL-178519</changelog>
</package>
<package pkgid="12fbcd769f591d7f11d204a7ae65318ce0b754232ea809a377c54a3fd000e01e" name="python3.11-debugsource" arch="i686">
  <version epoch="0" ver="3.11.13" rel="10.el9_8"/>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.11.13-1" date="1749038400">- Update to 3.11.13
- Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.13-2" date="1753272000">- Fix PySSL_SetError handling SSL_ERROR_SYSCALL
- This fixes random flakiness of test_ssl on stressed machines
Resolves: RHEL-101551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.13-3" date="1755777600">- Security fix for CVE-2025-8194
Resolves: RHEL-106365</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.11.13-4" date="1768219200">- Security fix for CVE-2025-12084
Resolves: RHEL-135395</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.11.13-5" date="1768564800">- Security fix for CVE-2025-13836
Resolves: RHEL-141025</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.11.13-6" date="1772193600">- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143110
Resolves: RHEL-143170
Resolves: RHEL-144894</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.11.13-7" date="1773057600">- Rebuilding previous fixes for different build target
Related: RHEL-143110, RHEL-143170, RHEL-144894</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.11.13-8" date="1774526400">- Security fix for CVE-2026-4519
Resolves: RHEL-158053</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.13-9" date="1776427200">- Security fixes for CVE-2026-4786, CVE-2026-6100
Resolves: RHEL-168158, RHEL-167916</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.11.13-10" date="1780315200">- Depend on sqlite-libs with (de)serialize API
Resolves: RHEL-178519</changelog>
</package>
<package pkgid="a01d098c567258e8af76efd0e1df7d4c69fc3c74d736d8f99c809a50bb204a06" name="python3.11-debugsource" arch="x86_64">
  <version epoch="0" ver="3.11.13" rel="10.el9_8"/>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.11.13-1" date="1749038400">- Update to 3.11.13
- Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.13-2" date="1753272000">- Fix PySSL_SetError handling SSL_ERROR_SYSCALL
- This fixes random flakiness of test_ssl on stressed machines
Resolves: RHEL-101551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.13-3" date="1755777600">- Security fix for CVE-2025-8194
Resolves: RHEL-106365</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.11.13-4" date="1768219200">- Security fix for CVE-2025-12084
Resolves: RHEL-135395</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.11.13-5" date="1768564800">- Security fix for CVE-2025-13836
Resolves: RHEL-141025</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.11.13-6" date="1772193600">- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143110
Resolves: RHEL-143170
Resolves: RHEL-144894</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.11.13-7" date="1773057600">- Rebuilding previous fixes for different build target
Related: RHEL-143110, RHEL-143170, RHEL-144894</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.11.13-8" date="1774526400">- Security fix for CVE-2026-4519
Resolves: RHEL-158053</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.11.13-9" date="1776427200">- Security fixes for CVE-2026-4786, CVE-2026-6100
Resolves: RHEL-168158, RHEL-167916</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.11.13-10" date="1780315200">- Depend on sqlite-libs with (de)serialize API
Resolves: RHEL-178519</changelog>
</package>
<package pkgid="d52b10c9d166b7e236929e5b58e590c13af5f9f3bfc2d4217e65ab35397c1d2c" name="python3.12-debuginfo" arch="i686">
  <version epoch="0" ver="3.12.13" rel="3.el9_8.1"/>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.12-2" date="1767873600">- Security fix for CVE-2025-12084
Resolves: RHEL-135399</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.12-3" date="1768564800">- Security fix for CVE-2025-13836
Resolves: RHEL-141026</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.12-4" date="1768824000">- Release bump to correct the build for wrong release
Related: RHEL-141026</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.12-5" date="1772193600">- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143112
Resolves: RHEL-143172
Resolves: RHEL-144895</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.12-6" date="1773057600">- Rebuilding previous fixes for different build target
Related: RHEL-143112, RHEL-143172, RHEL-144895</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.12-7" date="1774612800">- Security fix for CVE-2026-4519
Resolves: RHEL-158126</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.13-1" date="1776340800">- Update to 3.12.13
- Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672
Related: RHEL-168159, RHEL-167917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.12.13-2" date="1776340801">- Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
Resolves: RHEL-168159, RHEL-167917</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.12.13-3" date="1780315200">- Depend on sqlite-libs with (de)serialize API
Resolves: RHEL-180474</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.12.13-3.1" date="1783684800">- Security fix for CVE-2026-15308
Resolves: RHEL-RHEL-193793</changelog>
</package>
<package pkgid="2c15cc0229d260aba9a5f01ed8d01349f5e47bde35733bda5994dc4890043ff6" name="python3.12-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.12.13" rel="3.el9_8.1"/>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.12-2" date="1767873600">- Security fix for CVE-2025-12084
Resolves: RHEL-135399</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.12-3" date="1768564800">- Security fix for CVE-2025-13836
Resolves: RHEL-141026</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.12-4" date="1768824000">- Release bump to correct the build for wrong release
Related: RHEL-141026</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.12-5" date="1772193600">- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143112
Resolves: RHEL-143172
Resolves: RHEL-144895</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.12-6" date="1773057600">- Rebuilding previous fixes for different build target
Related: RHEL-143112, RHEL-143172, RHEL-144895</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.12-7" date="1774612800">- Security fix for CVE-2026-4519
Resolves: RHEL-158126</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.13-1" date="1776340800">- Update to 3.12.13
- Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672
Related: RHEL-168159, RHEL-167917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.12.13-2" date="1776340801">- Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
Resolves: RHEL-168159, RHEL-167917</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.12.13-3" date="1780315200">- Depend on sqlite-libs with (de)serialize API
Resolves: RHEL-180474</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.12.13-3.1" date="1783684800">- Security fix for CVE-2026-15308
Resolves: RHEL-RHEL-193793</changelog>
</package>
<package pkgid="7bfee27ffbc3e352cbf88749b90e14a74af286b923d6e9ad40d076eff470790b" name="python3.12-debuginfo" arch="i686">
  <version epoch="0" ver="3.12.13" rel="3.el9_8"/>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 3.12.12-1" date="1763121600">- Update to 3.12.12
Resolves: RHEL-125856</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.12-2" date="1767873600">- Security fix for CVE-2025-12084
Resolves: RHEL-135399</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.12-3" date="1768564800">- Security fix for CVE-2025-13836
Resolves: RHEL-141026</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.12-4" date="1768824000">- Release bump to correct the build for wrong release
Related: RHEL-141026</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.12-5" date="1772193600">- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143112
Resolves: RHEL-143172
Resolves: RHEL-144895</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.12-6" date="1773057600">- Rebuilding previous fixes for different build target
Related: RHEL-143112, RHEL-143172, RHEL-144895</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.12-7" date="1774612800">- Security fix for CVE-2026-4519
Resolves: RHEL-158126</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.13-1" date="1776340800">- Update to 3.12.13
- Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672
Related: RHEL-168159, RHEL-167917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.12.13-2" date="1776340801">- Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
Resolves: RHEL-168159, RHEL-167917</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.12.13-3" date="1780315200">- Depend on sqlite-libs with (de)serialize API
Resolves: RHEL-180474</changelog>
</package>
<package pkgid="34a4f91128629555c8ea351f44429fe81dbf63768580b866cd2f5155a2a59b9c" name="python3.12-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.12.13" rel="3.el9_8"/>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 3.12.12-1" date="1763121600">- Update to 3.12.12
Resolves: RHEL-125856</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.12-2" date="1767873600">- Security fix for CVE-2025-12084
Resolves: RHEL-135399</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.12-3" date="1768564800">- Security fix for CVE-2025-13836
Resolves: RHEL-141026</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.12-4" date="1768824000">- Release bump to correct the build for wrong release
Related: RHEL-141026</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.12-5" date="1772193600">- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143112
Resolves: RHEL-143172
Resolves: RHEL-144895</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.12-6" date="1773057600">- Rebuilding previous fixes for different build target
Related: RHEL-143112, RHEL-143172, RHEL-144895</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.12-7" date="1774612800">- Security fix for CVE-2026-4519
Resolves: RHEL-158126</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.13-1" date="1776340800">- Update to 3.12.13
- Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672
Related: RHEL-168159, RHEL-167917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.12.13-2" date="1776340801">- Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
Resolves: RHEL-168159, RHEL-167917</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.12.13-3" date="1780315200">- Depend on sqlite-libs with (de)serialize API
Resolves: RHEL-180474</changelog>
</package>
<package pkgid="2fb91022a39a26139f962918a469c32668c1106a21fb9e887e83e100099cda98" name="python3.12-debugsource" arch="i686">
  <version epoch="0" ver="3.12.13" rel="3.el9_8.1"/>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.12-2" date="1767873600">- Security fix for CVE-2025-12084
Resolves: RHEL-135399</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.12-3" date="1768564800">- Security fix for CVE-2025-13836
Resolves: RHEL-141026</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.12-4" date="1768824000">- Release bump to correct the build for wrong release
Related: RHEL-141026</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.12-5" date="1772193600">- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143112
Resolves: RHEL-143172
Resolves: RHEL-144895</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.12-6" date="1773057600">- Rebuilding previous fixes for different build target
Related: RHEL-143112, RHEL-143172, RHEL-144895</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.12-7" date="1774612800">- Security fix for CVE-2026-4519
Resolves: RHEL-158126</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.13-1" date="1776340800">- Update to 3.12.13
- Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672
Related: RHEL-168159, RHEL-167917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.12.13-2" date="1776340801">- Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
Resolves: RHEL-168159, RHEL-167917</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.12.13-3" date="1780315200">- Depend on sqlite-libs with (de)serialize API
Resolves: RHEL-180474</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.12.13-3.1" date="1783684800">- Security fix for CVE-2026-15308
Resolves: RHEL-RHEL-193793</changelog>
</package>
<package pkgid="0f9e6701db898d991ed480f1232a38185a53c5d64c6e889ea86832dc208b9ace" name="python3.12-debugsource" arch="x86_64">
  <version epoch="0" ver="3.12.13" rel="3.el9_8.1"/>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.12-2" date="1767873600">- Security fix for CVE-2025-12084
Resolves: RHEL-135399</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.12-3" date="1768564800">- Security fix for CVE-2025-13836
Resolves: RHEL-141026</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.12-4" date="1768824000">- Release bump to correct the build for wrong release
Related: RHEL-141026</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.12-5" date="1772193600">- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143112
Resolves: RHEL-143172
Resolves: RHEL-144895</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.12-6" date="1773057600">- Rebuilding previous fixes for different build target
Related: RHEL-143112, RHEL-143172, RHEL-144895</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.12-7" date="1774612800">- Security fix for CVE-2026-4519
Resolves: RHEL-158126</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.13-1" date="1776340800">- Update to 3.12.13
- Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672
Related: RHEL-168159, RHEL-167917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.12.13-2" date="1776340801">- Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
Resolves: RHEL-168159, RHEL-167917</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.12.13-3" date="1780315200">- Depend on sqlite-libs with (de)serialize API
Resolves: RHEL-180474</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.12.13-3.1" date="1783684800">- Security fix for CVE-2026-15308
Resolves: RHEL-RHEL-193793</changelog>
</package>
<package pkgid="b09cf88b86cf41d7d0ce0995b39a77b3157a8250241eb9b22c809e39ba6ec77d" name="python3.12-debugsource" arch="i686">
  <version epoch="0" ver="3.12.13" rel="3.el9_8"/>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 3.12.12-1" date="1763121600">- Update to 3.12.12
Resolves: RHEL-125856</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.12-2" date="1767873600">- Security fix for CVE-2025-12084
Resolves: RHEL-135399</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.12-3" date="1768564800">- Security fix for CVE-2025-13836
Resolves: RHEL-141026</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.12-4" date="1768824000">- Release bump to correct the build for wrong release
Related: RHEL-141026</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.12-5" date="1772193600">- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143112
Resolves: RHEL-143172
Resolves: RHEL-144895</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.12-6" date="1773057600">- Rebuilding previous fixes for different build target
Related: RHEL-143112, RHEL-143172, RHEL-144895</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.12-7" date="1774612800">- Security fix for CVE-2026-4519
Resolves: RHEL-158126</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.13-1" date="1776340800">- Update to 3.12.13
- Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672
Related: RHEL-168159, RHEL-167917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.12.13-2" date="1776340801">- Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
Resolves: RHEL-168159, RHEL-167917</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.12.13-3" date="1780315200">- Depend on sqlite-libs with (de)serialize API
Resolves: RHEL-180474</changelog>
</package>
<package pkgid="a5f112ebadd194662bd942fbd846ec8061d56720993743c40336dbaa853045af" name="python3.12-debugsource" arch="x86_64">
  <version epoch="0" ver="3.12.13" rel="3.el9_8"/>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 3.12.12-1" date="1763121600">- Update to 3.12.12
Resolves: RHEL-125856</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.12-2" date="1767873600">- Security fix for CVE-2025-12084
Resolves: RHEL-135399</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.12-3" date="1768564800">- Security fix for CVE-2025-13836
Resolves: RHEL-141026</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.12.12-4" date="1768824000">- Release bump to correct the build for wrong release
Related: RHEL-141026</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.12-5" date="1772193600">- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143112
Resolves: RHEL-143172
Resolves: RHEL-144895</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.12-6" date="1773057600">- Rebuilding previous fixes for different build target
Related: RHEL-143112, RHEL-143172, RHEL-144895</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.12-7" date="1774612800">- Security fix for CVE-2026-4519
Resolves: RHEL-158126</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.12.13-1" date="1776340800">- Update to 3.12.13
- Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672
Related: RHEL-168159, RHEL-167917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.12.13-2" date="1776340801">- Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
Resolves: RHEL-168159, RHEL-167917</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.12.13-3" date="1780315200">- Depend on sqlite-libs with (de)serialize API
Resolves: RHEL-180474</changelog>
</package>
<package pkgid="0e47e20816cfc3ad1146f5bf7342d0f2458e7685aab618f964f625bf93d379b2" name="python3.9-debugsource" arch="i686">
  <version epoch="0" ver="3.9.25" rel="7.el9_8.2"/>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.9.24-1" date="1760097600">- Update to Python 3.9.24</changelog>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.9.25-1" date="1762171200">- Update to Python 3.9.25</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 3.9.25-2" date="1762776000">- Move _sysconfigdata_d_linux*.py to the debug subpackage</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-3" date="1768392000">- Security fix for CVE-2025-12084
Resolves: RHEL-135897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-4" date="1772020800">- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143117
Resolves: RHEL-143174
Resolves: RHEL-144897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-5" date="1773057600">- Rebuilding previous fixes for different build target
Related: RHEL-143117, RHEL-143174, RHEL-144897</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-6" date="1774526400">- Security fix for CVE-2026-4519
Resolves: RHEL-158117</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.9.25-7" date="1776427200">- Security fixes for CVE-2026-4786 and CVE-2026-6100
Resolves: RHEL-167919, RHEL-168161</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 3.9.25-7.1" date="1782993600">- Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+
Resolves: RHEL-194207</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.9.25-7.2" date="1783944000">- Security fix for CVE-2026-15308
Resolves: RHEL-193786</changelog>
</package>
<package pkgid="3d6950407404f8b89f438816e12a2e1158530012829d15cc083d0c950ba1e60f" name="python3.9-debugsource" arch="x86_64">
  <version epoch="0" ver="3.9.25" rel="7.el9_8.2"/>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.9.24-1" date="1760097600">- Update to Python 3.9.24</changelog>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.9.25-1" date="1762171200">- Update to Python 3.9.25</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 3.9.25-2" date="1762776000">- Move _sysconfigdata_d_linux*.py to the debug subpackage</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-3" date="1768392000">- Security fix for CVE-2025-12084
Resolves: RHEL-135897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-4" date="1772020800">- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143117
Resolves: RHEL-143174
Resolves: RHEL-144897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-5" date="1773057600">- Rebuilding previous fixes for different build target
Related: RHEL-143117, RHEL-143174, RHEL-144897</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-6" date="1774526400">- Security fix for CVE-2026-4519
Resolves: RHEL-158117</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.9.25-7" date="1776427200">- Security fixes for CVE-2026-4786 and CVE-2026-6100
Resolves: RHEL-167919, RHEL-168161</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 3.9.25-7.1" date="1782993600">- Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+
Resolves: RHEL-194207</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.9.25-7.2" date="1783944000">- Security fix for CVE-2026-15308
Resolves: RHEL-193786</changelog>
</package>
<package pkgid="86644533053bae5079100704668baef208abfcebb0f015e31dbec73546ca5666" name="python3.9-debugsource" arch="i686">
  <version epoch="0" ver="3.9.25" rel="7.el9_8.3"/>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.9.25-1" date="1762171200">- Update to Python 3.9.25</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 3.9.25-2" date="1762776000">- Move _sysconfigdata_d_linux*.py to the debug subpackage</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-3" date="1768392000">- Security fix for CVE-2025-12084
Resolves: RHEL-135897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-4" date="1772020800">- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143117
Resolves: RHEL-143174
Resolves: RHEL-144897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-5" date="1773057600">- Rebuilding previous fixes for different build target
Related: RHEL-143117, RHEL-143174, RHEL-144897</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-6" date="1774526400">- Security fix for CVE-2026-4519
Resolves: RHEL-158117</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.9.25-7" date="1776427200">- Security fixes for CVE-2026-4786 and CVE-2026-6100
Resolves: RHEL-167919, RHEL-168161</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 3.9.25-7.1" date="1782993600">- Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+
Resolves: RHEL-194207</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.9.25-7.2" date="1783944000">- Security fix for CVE-2026-15308
Resolves: RHEL-193786</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.9.25-7.3" date="1786017600">- Security fix for CVE-2026-11940
Resolves: RHEL-227228</changelog>
</package>
<package pkgid="21720b209c7a51a53ddb2b9731ff5397beefc3159e4a70a8e139bd7b27768d1c" name="python3.9-debugsource" arch="x86_64">
  <version epoch="0" ver="3.9.25" rel="7.el9_8.3"/>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.9.25-1" date="1762171200">- Update to Python 3.9.25</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 3.9.25-2" date="1762776000">- Move _sysconfigdata_d_linux*.py to the debug subpackage</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-3" date="1768392000">- Security fix for CVE-2025-12084
Resolves: RHEL-135897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-4" date="1772020800">- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143117
Resolves: RHEL-143174
Resolves: RHEL-144897</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.9.25-5" date="1773057600">- Rebuilding previous fixes for different build target
Related: RHEL-143117, RHEL-143174, RHEL-144897</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.9.25-6" date="1774526400">- Security fix for CVE-2026-4519
Resolves: RHEL-158117</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.9.25-7" date="1776427200">- Security fixes for CVE-2026-4786 and CVE-2026-6100
Resolves: RHEL-167919, RHEL-168161</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 3.9.25-7.1" date="1782993600">- Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+
Resolves: RHEL-194207</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 3.9.25-7.2" date="1783944000">- Security fix for CVE-2026-15308
Resolves: RHEL-193786</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.9.25-7.3" date="1786017600">- Security fix for CVE-2026-11940
Resolves: RHEL-227228</changelog>
</package>
<package pkgid="5f6d9fb80e890f07dd9e8fbe31b9ef5896db40906c37d0645fdd44cf1b86f79a" name="qemu-guest-agent-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.3"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-11" date="1768824000">- kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
- Resolves: RHEL-138240
  (QEMU crashes when stopping source VM during live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
</package>
<package pkgid="3f56a595e976a7cf72a62921daa4b2278f143f302360ae0fe3eec547c319f80c" name="qemu-guest-agent-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.4"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
</package>
<package pkgid="23eca46434878436bb26050d91551132d676b4e9a941666a833a96e90f4f0d04" name="qemu-guest-agent-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.5"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
  <changelog author="Danilo de Paula &lt;ddepaula@redhat.com&gt; - 10.1.0-17.el9_8.5" date="1784289600">- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387]
- Resolves: RHEL-207387
  (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z])</changelog>
</package>
<package pkgid="813cd7bde4643e04d3d538bc8463362c2801fcb35169114012856a30611ff855" name="qemu-img-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.3"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-11" date="1768824000">- kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
- Resolves: RHEL-138240
  (QEMU crashes when stopping source VM during live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
</package>
<package pkgid="043ce79cef5b8d5adb7ee2cdb9fb3dccbfc47438d934b22ea1fa66e3b03eb8f7" name="qemu-img-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.4"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
</package>
<package pkgid="dd8440956d7ea2d94d8f287c63d35fb0fe5ede0bc3efdf002e3af855a6b1e0b1" name="qemu-img-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.5"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
  <changelog author="Danilo de Paula &lt;ddepaula@redhat.com&gt; - 10.1.0-17.el9_8.5" date="1784289600">- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387]
- Resolves: RHEL-207387
  (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z])</changelog>
</package>
<package pkgid="308e8b2ad611d842c13fddd92dc02f4205e242514dd821bd3a3aca7284001412" name="qemu-kvm-audio-pa-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.3"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-11" date="1768824000">- kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
- Resolves: RHEL-138240
  (QEMU crashes when stopping source VM during live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
</package>
<package pkgid="3ded85fa51fcd81b2b2034e7865e55f83c556a0ce4c2f99b0d0d175423fd3cdd" name="qemu-kvm-audio-pa-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.4"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
</package>
<package pkgid="32967595a3b590c6fce25ff5e9cdf9c0bac2db118976b4820295c2845ef2b11a" name="qemu-kvm-audio-pa-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.5"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
  <changelog author="Danilo de Paula &lt;ddepaula@redhat.com&gt; - 10.1.0-17.el9_8.5" date="1784289600">- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387]
- Resolves: RHEL-207387
  (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z])</changelog>
</package>
<package pkgid="0f2db2d2ffdeae8f238dbf3376a74294e2b28513d1b363b87e10531e01eae77c" name="qemu-kvm-block-blkio-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.3"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-11" date="1768824000">- kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
- Resolves: RHEL-138240
  (QEMU crashes when stopping source VM during live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
</package>
<package pkgid="20d5adeed023133697b566e6feff9f683bc9dd01330d40202196ebcd6f4f8332" name="qemu-kvm-block-blkio-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.4"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
</package>
<package pkgid="06303cd09329f50f10a30d96696c5f2b20908daf992158668ebdc71a68ae7df9" name="qemu-kvm-block-blkio-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.5"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
  <changelog author="Danilo de Paula &lt;ddepaula@redhat.com&gt; - 10.1.0-17.el9_8.5" date="1784289600">- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387]
- Resolves: RHEL-207387
  (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z])</changelog>
</package>
<package pkgid="ed5fdfd48467d399c938c8e04f28f196acaa919ad86a8278ca6466dd91edb183" name="qemu-kvm-block-curl-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.3"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-11" date="1768824000">- kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
- Resolves: RHEL-138240
  (QEMU crashes when stopping source VM during live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
</package>
<package pkgid="be8fbd5f74b302751141aab6ebe38ca54d388ef285b9201f5c9b4717ea497794" name="qemu-kvm-block-curl-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.4"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
</package>
<package pkgid="7660883bb001985eedd43c41e8824686bdb1cc3a6d66b8df17b5b19dc6134c81" name="qemu-kvm-block-curl-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.5"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
  <changelog author="Danilo de Paula &lt;ddepaula@redhat.com&gt; - 10.1.0-17.el9_8.5" date="1784289600">- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387]
- Resolves: RHEL-207387
  (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z])</changelog>
</package>
<package pkgid="0e60f2042503c68d66fe3cea86c1bbb5392cebb40f57846d2e437d024dce4f55" name="qemu-kvm-block-rbd-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.3"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-11" date="1768824000">- kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
- Resolves: RHEL-138240
  (QEMU crashes when stopping source VM during live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
</package>
<package pkgid="4ed197ef25417fe5fa6de8a114aacf61328d45d1339a4d906872952600a9ce25" name="qemu-kvm-block-rbd-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.4"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
</package>
<package pkgid="3763ef08e23aa50e2f532e5c1e83cf03c228f7b3f0be5d756ebfd5101f64238e" name="qemu-kvm-block-rbd-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.5"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
  <changelog author="Danilo de Paula &lt;ddepaula@redhat.com&gt; - 10.1.0-17.el9_8.5" date="1784289600">- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387]
- Resolves: RHEL-207387
  (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z])</changelog>
</package>
<package pkgid="30175ab468c832b675948908e57eb2f421616fbf2650cecadc9771c54e0bfc00" name="qemu-kvm-common-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.3"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-11" date="1768824000">- kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
- Resolves: RHEL-138240
  (QEMU crashes when stopping source VM during live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
</package>
<package pkgid="17fdc4cf3771fe5b334b6fe67ed9dd56c27a5206d3450ad9f7610b383173d6a8" name="qemu-kvm-common-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.4"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
</package>
<package pkgid="168fedef89252aa804b5be7794969fcc12be0d28cd9cab3ed68c53bfb17b6754" name="qemu-kvm-common-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.5"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
  <changelog author="Danilo de Paula &lt;ddepaula@redhat.com&gt; - 10.1.0-17.el9_8.5" date="1784289600">- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387]
- Resolves: RHEL-207387
  (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z])</changelog>
</package>
<package pkgid="09faa0fdcb24c841f40d8af3e8fd928ae624aa88b11003f8f1feb07617b2fa61" name="qemu-kvm-core-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.3"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-11" date="1768824000">- kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
- Resolves: RHEL-138240
  (QEMU crashes when stopping source VM during live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
</package>
<package pkgid="a9e6cf61781335f5ad11e8ac5b84da66e1e0a60503fa9d178a967413b3e6c79d" name="qemu-kvm-core-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.4"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
</package>
<package pkgid="2585d672067fa3e1b4c8559caca1537a2bc9d72d39ed41b3c4266baac4addd49" name="qemu-kvm-core-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.5"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
  <changelog author="Danilo de Paula &lt;ddepaula@redhat.com&gt; - 10.1.0-17.el9_8.5" date="1784289600">- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387]
- Resolves: RHEL-207387
  (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z])</changelog>
</package>
<package pkgid="ef09a3984bb81d043b03a33f09b233608d6874dc01ea52d23be5a103df60ad01" name="qemu-kvm-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.3"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-11" date="1768824000">- kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
- Resolves: RHEL-138240
  (QEMU crashes when stopping source VM during live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
</package>
<package pkgid="5a31789a38d9a9d802bc77b60e08679061847f294e3ed8c18cba0e4519711eab" name="qemu-kvm-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.4"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
</package>
<package pkgid="b8429d75d35e9b3388c534b91feade6da8d8183ed4a0ef22a977a94f501c1728" name="qemu-kvm-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.5"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
  <changelog author="Danilo de Paula &lt;ddepaula@redhat.com&gt; - 10.1.0-17.el9_8.5" date="1784289600">- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387]
- Resolves: RHEL-207387
  (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z])</changelog>
</package>
<package pkgid="83ed838d788d0ce3734ffdc3a12318b2454760692d7e7e76cebeb845712e8a61" name="qemu-kvm-debugsource" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.3"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-11" date="1768824000">- kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
- Resolves: RHEL-138240
  (QEMU crashes when stopping source VM during live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
</package>
<package pkgid="2ed336ca0b43f978f39065d153a5652191c15e144dc338687e6d651915138423" name="qemu-kvm-debugsource" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.4"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
</package>
<package pkgid="c78b9da092ea2d9c35125b56b0bfbdbc3bb5e9998fd77ae47009401e2eaf9f21" name="qemu-kvm-debugsource" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.5"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
  <changelog author="Danilo de Paula &lt;ddepaula@redhat.com&gt; - 10.1.0-17.el9_8.5" date="1784289600">- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387]
- Resolves: RHEL-207387
  (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z])</changelog>
</package>
<package pkgid="e1f86b68c8c9f2c5fcda17be43bdbb94a2ef58a05fadffccd70a34da044391ad" name="qemu-kvm-device-display-virtio-gpu-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.3"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-11" date="1768824000">- kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
- Resolves: RHEL-138240
  (QEMU crashes when stopping source VM during live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
</package>
<package pkgid="c6547933c76a767ee908c7894651ae37a017853a61de8fbd69030ba16f12365a" name="qemu-kvm-device-display-virtio-gpu-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.4"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
</package>
<package pkgid="c487bcbf52742bb5249f716c1af8f9e85e1556f081ad018da9d006f740254f95" name="qemu-kvm-device-display-virtio-gpu-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.5"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
  <changelog author="Danilo de Paula &lt;ddepaula@redhat.com&gt; - 10.1.0-17.el9_8.5" date="1784289600">- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387]
- Resolves: RHEL-207387
  (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z])</changelog>
</package>
<package pkgid="ac7a63be7554df2a96fd1d4df44fded565c3f51cd0e0bab99cc13e8bec6100dc" name="qemu-kvm-device-display-virtio-gpu-pci-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.3"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-11" date="1768824000">- kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
- Resolves: RHEL-138240
  (QEMU crashes when stopping source VM during live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
</package>
<package pkgid="47aa9e6c208e6b876656ef8b518ab7fd53d2c604149dc42dd528afb3a6ac8b80" name="qemu-kvm-device-display-virtio-gpu-pci-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.4"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
</package>
<package pkgid="80a61ced0068c4e6d6b6f22fb32d61bdc3bd4af94efb022bc76ec8b98ff511db" name="qemu-kvm-device-display-virtio-gpu-pci-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.5"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
  <changelog author="Danilo de Paula &lt;ddepaula@redhat.com&gt; - 10.1.0-17.el9_8.5" date="1784289600">- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387]
- Resolves: RHEL-207387
  (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z])</changelog>
</package>
<package pkgid="9d12a105b7c6242b086516b7a63dadbf63d1d8b1528013dfb9ac895c0b66c131" name="qemu-kvm-device-display-virtio-vga-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.3"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-11" date="1768824000">- kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
- Resolves: RHEL-138240
  (QEMU crashes when stopping source VM during live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
</package>
<package pkgid="526199fbb01b4f739ca7840f777ff8e169ff2d6a2b76d4be23bd05a570582626" name="qemu-kvm-device-display-virtio-vga-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.4"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
</package>
<package pkgid="70c1013e410e0f0ee88bf59dfed8959d274d19ebb158fefa98778bf05771b981" name="qemu-kvm-device-display-virtio-vga-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.5"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
  <changelog author="Danilo de Paula &lt;ddepaula@redhat.com&gt; - 10.1.0-17.el9_8.5" date="1784289600">- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387]
- Resolves: RHEL-207387
  (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z])</changelog>
</package>
<package pkgid="9cb6e585a314d5581b1ca2c8f5590938c5859928f0e7476dea15d35704f1785e" name="qemu-kvm-device-usb-host-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.3"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-11" date="1768824000">- kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
- Resolves: RHEL-138240
  (QEMU crashes when stopping source VM during live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
</package>
<package pkgid="9c28dc6d9cb4dd084a1afb2f705bce45c283de5e8a2cef9ec151455458b865dd" name="qemu-kvm-device-usb-host-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.4"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
</package>
<package pkgid="874b8ab43af882cd5ad3520257fd89f5a7e515dbe94ba770ddd4ec0465babb17" name="qemu-kvm-device-usb-host-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.5"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
  <changelog author="Danilo de Paula &lt;ddepaula@redhat.com&gt; - 10.1.0-17.el9_8.5" date="1784289600">- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387]
- Resolves: RHEL-207387
  (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z])</changelog>
</package>
<package pkgid="a7c2b9a98971f04da67c65c90bc3b3eb9360516d83a4decf0223a23f3ff9cd93" name="qemu-kvm-device-usb-redirect-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.3"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-11" date="1768824000">- kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
- Resolves: RHEL-138240
  (QEMU crashes when stopping source VM during live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
</package>
<package pkgid="af06541bff8b77d3cc63f1f6b2585ea85a3e88d0feb6fba24a75ec74104b3268" name="qemu-kvm-device-usb-redirect-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.4"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
</package>
<package pkgid="8279e646a0cdf000dab816b10d52f8dda25edb7faacefd6003d744f4c486dc8d" name="qemu-kvm-device-usb-redirect-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.5"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
  <changelog author="Danilo de Paula &lt;ddepaula@redhat.com&gt; - 10.1.0-17.el9_8.5" date="1784289600">- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387]
- Resolves: RHEL-207387
  (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z])</changelog>
</package>
<package pkgid="bd1e6e8cbf3554c5454909555d5e9dda35180b9b25c3ae763406734b73b80891" name="qemu-kvm-tools-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.3"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-11" date="1768824000">- kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
- Resolves: RHEL-138240
  (QEMU crashes when stopping source VM during live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
</package>
<package pkgid="b7ed50cc4f360584bfaeef3320f9e4c14064343f07ce86b6901e5dffd7443087" name="qemu-kvm-tools-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.4"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
</package>
<package pkgid="eef39c8c8fcd7c3406ca3ff2c09f007de4d2fb84b999b6bb172809a43d94aff4" name="qemu-kvm-tools-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.5"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
  <changelog author="Danilo de Paula &lt;ddepaula@redhat.com&gt; - 10.1.0-17.el9_8.5" date="1784289600">- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387]
- Resolves: RHEL-207387
  (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z])</changelog>
</package>
<package pkgid="dc01b069b440259029c56eb3e90e1ad00b24207aa4fbdcbd696e539f8d9bc3b6" name="qemu-kvm-ui-egl-headless-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.3"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-11" date="1768824000">- kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
- Resolves: RHEL-138240
  (QEMU crashes when stopping source VM during live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
</package>
<package pkgid="a7562e0059f94f809af65d521d03449b3e81ea54c5ceb7c02841b310fb4a5e5d" name="qemu-kvm-ui-egl-headless-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.4"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
</package>
<package pkgid="33524ce8805fd74a6515feeb038293c27d5d8ae68920bb399a2494e59686152a" name="qemu-kvm-ui-egl-headless-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.5"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
  <changelog author="Danilo de Paula &lt;ddepaula@redhat.com&gt; - 10.1.0-17.el9_8.5" date="1784289600">- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387]
- Resolves: RHEL-207387
  (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z])</changelog>
</package>
<package pkgid="c2d42f0f330ad2c66f5d064629b646a5c1a131b28fb33b02f28bf733ac3c20ba" name="qemu-kvm-ui-opengl-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.3"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-11" date="1768824000">- kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
- Resolves: RHEL-138240
  (QEMU crashes when stopping source VM during live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
</package>
<package pkgid="24f179d1cc512e7fbd481cc09141b6e965cb50747bc500f2af23c7bdd76a03f8" name="qemu-kvm-ui-opengl-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.4"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
</package>
<package pkgid="45055ea28517a05a85bba3677042df3f4a98891f0300729dab6eb03cac77f263" name="qemu-kvm-ui-opengl-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.5"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
  <changelog author="Danilo de Paula &lt;ddepaula@redhat.com&gt; - 10.1.0-17.el9_8.5" date="1784289600">- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387]
- Resolves: RHEL-207387
  (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z])</changelog>
</package>
<package pkgid="511617e5935b2d48072b7581d405ec8fd29c934c20fb886bd9b4c90bf30bae24" name="qemu-pr-helper-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.3"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-11" date="1768824000">- kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
- Resolves: RHEL-138240
  (QEMU crashes when stopping source VM during live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
</package>
<package pkgid="ecfacc7e4534d21476602b336f3f24de94d8784bc59a96c3d22958f16c40d078" name="qemu-pr-helper-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.4"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
</package>
<package pkgid="33e15042dc900800b0219d700eb2517593fce8aba289e87b14a5ea2bd90fccc3" name="qemu-pr-helper-debuginfo" arch="x86_64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.5"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
  <changelog author="Danilo de Paula &lt;ddepaula@redhat.com&gt; - 10.1.0-17.el9_8.5" date="1784289600">- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387]
- Resolves: RHEL-207387
  (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z])</changelog>
</package>
<package pkgid="1470739960b45303d3a49b4d8169b2ec4b4476f82ac13533413ee40aa0bf47fe" name="rdma-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="11650b67c7d4b3138aa18c1cbf653ce6b79991c48eb73936d2d34d02aa9d363c" name="redis-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.2.11" rel="1.module+el9.7.0+168+a8374269"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 7.2.6-1" date="1730203200">- rebase to 7.2.6  RHEL-26628</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 7.2.7-1" date="1736942400">- rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 7.2.8-1" date="1745496000">- rebase to 7.2.8 for CVE-2025-21605</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 7.2.10-1" date="1752667200">- rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 7.2.11-1" date="1760616000">- rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819</changelog>
</package>
<package pkgid="1b52f118c67ce1f2b1c79cb731e574ea00505e5eeac37852259f29e7e2147fd1" name="redis-debugsource" arch="i686">
  <version epoch="0" ver="7.2.11" rel="1.module+el9.7.0+168+a8374269"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 7.2.6-1" date="1730203200">- rebase to 7.2.6  RHEL-26628</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 7.2.7-1" date="1736942400">- rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 7.2.8-1" date="1745496000">- rebase to 7.2.8 for CVE-2025-21605</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 7.2.10-1" date="1752667200">- rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 7.2.11-1" date="1760616000">- rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819</changelog>
</package>
<package pkgid="f4204b15b093689d7eb33637c83c5895c3da8af978c068ec42ea19f53dcf1660" name="redis-debugsource" arch="x86_64">
  <version epoch="0" ver="7.2.11" rel="1.module+el9.7.0+168+a8374269"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 7.2.6-1" date="1730203200">- rebase to 7.2.6  RHEL-26628</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 7.2.7-1" date="1736942400">- rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 7.2.8-1" date="1745496000">- rebase to 7.2.8 for CVE-2025-21605</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 7.2.10-1" date="1752667200">- rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 7.2.11-1" date="1760616000">- rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819</changelog>
</package>
<package pkgid="6d7491aa57c38eadd13a89ccc6375b7ab1e2109f73fd3e581c54e0311907bbf1" name="resource-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="111.el9_8.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-100" date="1764072000">- podman-etcd: add container crash detection with coordinated recovery

  Resolves: RHEL-126087</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-101" date="1764244800">- podman-etcd: prevent learner from starting before cluster is ready

  Resolves: RHEL-131185</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-102" date="1764676800">- podman-etcd: prevent retries on fatal errors

  Resolves: RHEL-132052</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-103" date="1765195200">- podman-etcd: align environment variable names with Etcd v3.6 Pod
  manifest

  Resolves: RHEL-133937</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-104" date="1767873600">- podman-etcd: verify that no static pod containers are running or
  being deleted before starting

  Resolves: RHEL-139519</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768392000">- powervs-subnet: new resource agent

  Resolves: RHEL-42513</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769083200">- powervs-move-ip/powervs-subnet: fix error logging

  Resolves: RHEL-143527</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1770206400">- podman-etcd: enhance etcd data backup with snapshots and retention

  Resolves: RHEL-145628</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1772798400">- podman-etcd: set attributes if they fail during force-new-cluster

  Resolves: RHEL-150700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-111.1" date="1775649600">- portblock: check inverse action state file for non-promotable
  resources to avoid issues when doing e.g. block followed by unblock
- podman-etcd: ignore learners when considering which node has higher revision
- podman-etcd: handle existing peer URLs gracefully during force_new_cluster recovery
- podman-etcd: hardened monitor/stop actions
- db2: set reintegration when promotion is successful

  Resolves: RHEL-151828, RHEL-156808, RHEL-157145, RHEL-159202, RHEL-157273</changelog>
</package>
<package pkgid="b2244edfa85f989cb55ceeeee3fab2cbcac2e76197d399a2169ec7f0c2f7f546" name="resource-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="111.el9_8.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-103" date="1765195200">- podman-etcd: align environment variable names with Etcd v3.6 Pod
  manifest

  Resolves: RHEL-133937</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-104" date="1767873600">- podman-etcd: verify that no static pod containers are running or
  being deleted before starting

  Resolves: RHEL-139519</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768392000">- powervs-subnet: new resource agent

  Resolves: RHEL-42513</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769083200">- powervs-move-ip/powervs-subnet: fix error logging

  Resolves: RHEL-143527</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1770206400">- podman-etcd: enhance etcd data backup with snapshots and retention

  Resolves: RHEL-145628</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1772798400">- podman-etcd: set attributes if they fail during force-new-cluster

  Resolves: RHEL-150700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-111.1" date="1775649600">- portblock: check inverse action state file for non-promotable
  resources to avoid issues when doing e.g. block followed by unblock
- podman-etcd: ignore learners when considering which node has higher revision
- podman-etcd: handle existing peer URLs gracefully during force_new_cluster recovery
- podman-etcd: hardened monitor/stop actions
- db2: set reintegration when promotion is successful

  Resolves: RHEL-151828, RHEL-156808, RHEL-157145, RHEL-159202, RHEL-157273</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-111.2" date="1775822400">- db2: do not use db2stop to avoid divergence in the log

  Resolves: RHEL-166183</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-111.3" date="1776686400">- Cloud agents: change bundled lib paths to match changes in
  ha-cloud-support

  Resolves: RHEL-168565</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-111.4" date="1779278400">- podman-etcd: fix port 2380 binding race
- podman-etcd: fix machine deletion deadlock
- podman-etcd: fix learner start deadlock

  Resolves: RHEL-177849, RHEL-177838, RHEL-177843</changelog>
</package>
<package pkgid="f7c9ff4b412892a4a82a2be96d75afd4b9c93596b9a143039285dd03370feb11" name="resource-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="111.el9_8.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1772798400">- podman-etcd: set attributes if they fail during force-new-cluster

  Resolves: RHEL-150700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-111.1" date="1775649600">- portblock: check inverse action state file for non-promotable
  resources to avoid issues when doing e.g. block followed by unblock
- podman-etcd: ignore learners when considering which node has higher revision
- podman-etcd: handle existing peer URLs gracefully during force_new_cluster recovery
- podman-etcd: hardened monitor/stop actions
- db2: set reintegration when promotion is successful

  Resolves: RHEL-151828, RHEL-156808, RHEL-157145, RHEL-159202, RHEL-157273</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-111.2" date="1775822400">- db2: do not use db2stop to avoid divergence in the log

  Resolves: RHEL-166183</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-111.3" date="1776686400">- Cloud agents: change bundled lib paths to match changes in
  ha-cloud-support

  Resolves: RHEL-168565</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-111.4" date="1779278400">- podman-etcd: fix port 2380 binding race
- podman-etcd: fix machine deletion deadlock
- podman-etcd: fix learner start deadlock

  Resolves: RHEL-177849, RHEL-177838, RHEL-177843</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-111.5" date="1782388800">- podman-etcd: remove cert monitoring

  Resolves: RHEL-188107</changelog>
  <changelog author="Arslan Ahmad &lt;arahmad@redhat.com&gt; - 4.10.0-111.6" date="1783684800">- aws-vpc-move-ip: add awscli_timeout parameter

  Resolves: RHEL-193966</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-111.7" date="1784116800">- podman-etcd: add support for single-node operation

  Resolves: RHEL-193691</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 4.10.0-111.7.alma.1" date="1784635200">- Add AlmaLinux to RHEL-based distro detection in ocf-distro</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 4.10.0-111" date="1786017600">- Add Navix to ocf-distro RHEL-based distro detection</changelog>
</package>
<package pkgid="66f9f531ed89ff740d04525594e31329d55d1a9866ae8e4a268de3f0c14ae94e" name="resource-agents-debugsource" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="111.el9_8.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-100" date="1764072000">- podman-etcd: add container crash detection with coordinated recovery

  Resolves: RHEL-126087</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-101" date="1764244800">- podman-etcd: prevent learner from starting before cluster is ready

  Resolves: RHEL-131185</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-102" date="1764676800">- podman-etcd: prevent retries on fatal errors

  Resolves: RHEL-132052</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-103" date="1765195200">- podman-etcd: align environment variable names with Etcd v3.6 Pod
  manifest

  Resolves: RHEL-133937</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-104" date="1767873600">- podman-etcd: verify that no static pod containers are running or
  being deleted before starting

  Resolves: RHEL-139519</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768392000">- powervs-subnet: new resource agent

  Resolves: RHEL-42513</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769083200">- powervs-move-ip/powervs-subnet: fix error logging

  Resolves: RHEL-143527</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1770206400">- podman-etcd: enhance etcd data backup with snapshots and retention

  Resolves: RHEL-145628</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1772798400">- podman-etcd: set attributes if they fail during force-new-cluster

  Resolves: RHEL-150700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-111.1" date="1775649600">- portblock: check inverse action state file for non-promotable
  resources to avoid issues when doing e.g. block followed by unblock
- podman-etcd: ignore learners when considering which node has higher revision
- podman-etcd: handle existing peer URLs gracefully during force_new_cluster recovery
- podman-etcd: hardened monitor/stop actions
- db2: set reintegration when promotion is successful

  Resolves: RHEL-151828, RHEL-156808, RHEL-157145, RHEL-159202, RHEL-157273</changelog>
</package>
<package pkgid="bc83e77d550c3a0f845369ee733bf2f749798fb6e26ea8dacdcfcd3a6222ee59" name="resource-agents-debugsource" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="111.el9_8.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-103" date="1765195200">- podman-etcd: align environment variable names with Etcd v3.6 Pod
  manifest

  Resolves: RHEL-133937</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-104" date="1767873600">- podman-etcd: verify that no static pod containers are running or
  being deleted before starting

  Resolves: RHEL-139519</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-105" date="1768392000">- powervs-subnet: new resource agent

  Resolves: RHEL-42513</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-106" date="1769083200">- powervs-move-ip/powervs-subnet: fix error logging

  Resolves: RHEL-143527</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-107" date="1770206400">- podman-etcd: enhance etcd data backup with snapshots and retention

  Resolves: RHEL-145628</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1772798400">- podman-etcd: set attributes if they fail during force-new-cluster

  Resolves: RHEL-150700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-111.1" date="1775649600">- portblock: check inverse action state file for non-promotable
  resources to avoid issues when doing e.g. block followed by unblock
- podman-etcd: ignore learners when considering which node has higher revision
- podman-etcd: handle existing peer URLs gracefully during force_new_cluster recovery
- podman-etcd: hardened monitor/stop actions
- db2: set reintegration when promotion is successful

  Resolves: RHEL-151828, RHEL-156808, RHEL-157145, RHEL-159202, RHEL-157273</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-111.2" date="1775822400">- db2: do not use db2stop to avoid divergence in the log

  Resolves: RHEL-166183</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-111.3" date="1776686400">- Cloud agents: change bundled lib paths to match changes in
  ha-cloud-support

  Resolves: RHEL-168565</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-111.4" date="1779278400">- podman-etcd: fix port 2380 binding race
- podman-etcd: fix machine deletion deadlock
- podman-etcd: fix learner start deadlock

  Resolves: RHEL-177849, RHEL-177838, RHEL-177843</changelog>
</package>
<package pkgid="edfef7f4cdc2c06e18905be1248230daaf109686beb820da8e23e7d77a60bcaf" name="resource-agents-debugsource" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="111.el9_8.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-108" date="1772798400">- podman-etcd: set attributes if they fail during force-new-cluster

  Resolves: RHEL-150700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-111.1" date="1775649600">- portblock: check inverse action state file for non-promotable
  resources to avoid issues when doing e.g. block followed by unblock
- podman-etcd: ignore learners when considering which node has higher revision
- podman-etcd: handle existing peer URLs gracefully during force_new_cluster recovery
- podman-etcd: hardened monitor/stop actions
- db2: set reintegration when promotion is successful

  Resolves: RHEL-151828, RHEL-156808, RHEL-157145, RHEL-159202, RHEL-157273</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-111.2" date="1775822400">- db2: do not use db2stop to avoid divergence in the log

  Resolves: RHEL-166183</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-111.3" date="1776686400">- Cloud agents: change bundled lib paths to match changes in
  ha-cloud-support

  Resolves: RHEL-168565</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-111.4" date="1779278400">- podman-etcd: fix port 2380 binding race
- podman-etcd: fix machine deletion deadlock
- podman-etcd: fix learner start deadlock

  Resolves: RHEL-177849, RHEL-177838, RHEL-177843</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-111.5" date="1782388800">- podman-etcd: remove cert monitoring

  Resolves: RHEL-188107</changelog>
  <changelog author="Arslan Ahmad &lt;arahmad@redhat.com&gt; - 4.10.0-111.6" date="1783684800">- aws-vpc-move-ip: add awscli_timeout parameter

  Resolves: RHEL-193966</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.10.0-111.7" date="1784116800">- podman-etcd: add support for single-node operation

  Resolves: RHEL-193691</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 4.10.0-111.7.alma.1" date="1784635200">- Add AlmaLinux to RHEL-based distro detection in ocf-distro</changelog>
  <changelog author="Linux Engineering Team &lt;dl_le@navercorp.com&gt; - 4.10.0-111" date="1786017600">- Add Navix to ocf-distro RHEL-based distro detection</changelog>
</package>
<package pkgid="e780d48890183c47ecbde31613cd4b022c78d9f043d4da4dd4bf6cc6a9ca493f" name="rrdtool-debuginfo" arch="i686">
  <version epoch="0" ver="1.7.2" rel="22.el9_8"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.7.2-22" date="1779278400">- Fixed stack buffer overflow in rrdcached and added more security checks
  Resolves: RHEL-173257</changelog>
</package>
<package pkgid="10e6758f3e0341f73016f3bff13e438fc35e0cf3f85237fb6811c8532b4d400f" name="rrdtool-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="22.el9_8"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.7.2-22" date="1779278400">- Fixed stack buffer overflow in rrdcached and added more security checks
  Resolves: RHEL-173257</changelog>
</package>
<package pkgid="04f2cf48a28fcc67e99e740b7a317533961d2d8fbf6d278b713e5abacfea6cc7" name="rrdtool-debugsource" arch="i686">
  <version epoch="0" ver="1.7.2" rel="22.el9_8"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.7.2-22" date="1779278400">- Fixed stack buffer overflow in rrdcached and added more security checks
  Resolves: RHEL-173257</changelog>
</package>
<package pkgid="43dc438b16e2e2c01896c09ed41ecdd99c88b9fbb3090aafb7107fe84b7d99d8" name="rrdtool-debugsource" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="22.el9_8"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.7.2-22" date="1779278400">- Fixed stack buffer overflow in rrdcached and added more security checks
  Resolves: RHEL-173257</changelog>
</package>
<package pkgid="4e53fc283df743cb82bfeb986d1ff38f41207e96e47753cdbdf8bbba33de55db" name="rrdtool-lua-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="22.el9_8"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.7.2-22" date="1779278400">- Fixed stack buffer overflow in rrdcached and added more security checks
  Resolves: RHEL-173257</changelog>
</package>
<package pkgid="ebbdceefe74e07909d9fdc189276163dee02ba3295b1c3831d7cd5859a9cc92e" name="rrdtool-perl-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="22.el9_8"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.7.2-22" date="1779278400">- Fixed stack buffer overflow in rrdcached and added more security checks
  Resolves: RHEL-173257</changelog>
</package>
<package pkgid="9b65de8bc20d129b15a871c4b9eab279ed811258865ee51eb8e82e5f60c815b8" name="rrdtool-ruby-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="22.el9_8"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.7.2-22" date="1779278400">- Fixed stack buffer overflow in rrdcached and added more security checks
  Resolves: RHEL-173257</changelog>
</package>
<package pkgid="d6624a01d0c31325fde74671b1c0089dd02d6dfc53eff6f9ad6b5ec67e156da4" name="rrdtool-tcl-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="22.el9_8"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.7.2-22" date="1779278400">- Fixed stack buffer overflow in rrdcached and added more security checks
  Resolves: RHEL-173257</changelog>
</package>
<package pkgid="4481b8946a99db7b78c1b2ab707c55e8c787205fdf1313c128afc104e987ca19" name="rsync-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.5" rel="7.el9_8.2"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.3-21" date="1733745600">- Resolves: RHEL-70265 - Rebase rsync to 3.2.5
- Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices
- Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps.
- Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-2" date="1738152000">- Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents
- Resolves: RHEL-70208 - Path traversal vulnerability in rsync
- Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal
- Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-3" date="1738756800">- Resolves: RHEL-70265 - Rebase rsync to 3.2.5</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-4" date="1760011200">- Resolves: RHEL-104404 - Do not clear DISPLAY unconditionally</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.2.5-7.1" date="1779969600">- Fix TOCTOU symlink race in daemon no-chroot mode (CVE-2026-29518)
- Resolves: RHEL-174952</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-7.2" date="1781524800">- Fix integer overflow in compressed-token decoding (CVE-2026-43618)
 - Resolves: RHEL-174932</changelog>
</package>
<package pkgid="d9517baec652b0e4c47f4a10942143ca5bff7abe40944e7ee5dc127166e99e6a" name="rsync-debugsource" arch="x86_64">
  <version epoch="0" ver="3.2.5" rel="7.el9_8.2"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.3-21" date="1733745600">- Resolves: RHEL-70265 - Rebase rsync to 3.2.5
- Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices
- Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps.
- Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-2" date="1738152000">- Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents
- Resolves: RHEL-70208 - Path traversal vulnerability in rsync
- Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal
- Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-3" date="1738756800">- Resolves: RHEL-70265 - Rebase rsync to 3.2.5</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-4" date="1760011200">- Resolves: RHEL-104404 - Do not clear DISPLAY unconditionally</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.2.5-7.1" date="1779969600">- Fix TOCTOU symlink race in daemon no-chroot mode (CVE-2026-29518)
- Resolves: RHEL-174952</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.2.5-7.2" date="1781524800">- Fix integer overflow in compressed-token decoding (CVE-2026-43618)
 - Resolves: RHEL-174932</changelog>
</package>
<package pkgid="2772c27319d7961adc1154a34f94e0bd90a19f96f2c1fb7646696f4e33508824" name="runc-debuginfo" arch="x86_64">
  <version epoch="4" ver="1.4.2" rel="2.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:1.2.5-1" date="1739880000">- update to https://github.com/opencontainers/runc/releases/tag/v1.2.5
- Related: RHEL-60277</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:1.2.6-1" date="1742299200">- update to https://github.com/opencontainers/runc/releases/tag/v1.2.6
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:1.3.0-1" date="1746014400">- update to https://github.com/opencontainers/runc/releases/tag/v1.3.0
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:1.3.1-1" date="1758024000">- update to https://github.com/opencontainers/runc/releases/tag/v1.3.1
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:1.3.2-1" date="1761739200">- update to https://github.com/opencontainers/runc/releases/tag/v1.3.2
- Resolves: RHEL-124800</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:1.3.3-1" date="1762344000">- update to https://github.com/opencontainers/runc/releases/tag/v1.3.3
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:1.4.0-1" date="1764849600">- update to https://github.com/opencontainers/runc/releases/tag/v1.4.0
- Resolves: RHEL-132769</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:1.4.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-61726
- Resolves: RHEL-146111</changelog>
  <changelog author="Kir Kolyshkin &lt;kir@redhat.com&gt; - 4:1.4.2-1" date="1775563200">- Update to https://github.com/opencontainers/runc/releases/tag/v1.4.2
- Resolves: RHEL-165497</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:1.4.2-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158787</changelog>
</package>
<package pkgid="24008dd1aff8da5770de8e8829010feddf4f8599530b8b292598575667b4bfca" name="runc-debugsource" arch="x86_64">
  <version epoch="4" ver="1.4.2" rel="2.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:1.2.5-1" date="1739880000">- update to https://github.com/opencontainers/runc/releases/tag/v1.2.5
- Related: RHEL-60277</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:1.2.6-1" date="1742299200">- update to https://github.com/opencontainers/runc/releases/tag/v1.2.6
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:1.3.0-1" date="1746014400">- update to https://github.com/opencontainers/runc/releases/tag/v1.3.0
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:1.3.1-1" date="1758024000">- update to https://github.com/opencontainers/runc/releases/tag/v1.3.1
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:1.3.2-1" date="1761739200">- update to https://github.com/opencontainers/runc/releases/tag/v1.3.2
- Resolves: RHEL-124800</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:1.3.3-1" date="1762344000">- update to https://github.com/opencontainers/runc/releases/tag/v1.3.3
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:1.4.0-1" date="1764849600">- update to https://github.com/opencontainers/runc/releases/tag/v1.4.0
- Resolves: RHEL-132769</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:1.4.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-61726
- Resolves: RHEL-146111</changelog>
  <changelog author="Kir Kolyshkin &lt;kir@redhat.com&gt; - 4:1.4.2-1" date="1775563200">- Update to https://github.com/opencontainers/runc/releases/tag/v1.4.2
- Resolves: RHEL-165497</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:1.4.2-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158787</changelog>
</package>
<package pkgid="3deec3cd62a0faedb121e1679bd293999e76abb982f5b22e7d00f174285f5353" name="samba-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="b2f71c9a44d150e15b7e8352a33f0fa034f5031fc868ff22ce916eb089af8bc9" name="samba-client-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="bd18b9b08aed7f3b9075972c9b4e49b477a294b21837e9fdf3510b1fdb693d72" name="samba-client-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="bf2811571868981d19d1bab1eb582011dddd08b8a705dad52a97c7e6d61e4644" name="samba-common-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="46f1af8b046d2f8b917af30295590cde654a3c2b9d974e57a6f57b1f981b2d53" name="samba-common-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="bfc43461ba66077d14f3cfffb6011cbe0237ac858b254e4b13c1481a49184a47" name="samba-common-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="d5d8cbdc4d0a0a261b98ae718948ca42b0d0a55b8c60f279b259279d514e6590" name="samba-dc-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="34f12c3274e89a33b0fdb4a1dee7e2c7048f0c64b5a06691d3a64111b8702fca" name="samba-dc-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="bb515d9a012f7d45446f365b650f9629f3d0916cfafd2541a04672391935d437" name="samba-dcerpc-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="245c9af4c954aa32976c66cadb46cffa37439f4666d83735f9a60d50c7c3c967" name="samba-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="fbc4b7819eeba11be8d3c52839274e9e91abe4be9c6d3a0cc3d6eb9467d02ec0" name="samba-debugsource" arch="i686">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="fa8a791a6b6a5f4249af7ce23f5443267f65899ef20dedd5ac2ab99ad0d23790" name="samba-debugsource" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="dc20b42f80c24acf03bc4e45588d9d8379bacf79cb74120aee787fa56145694f" name="samba-krb5-printing-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="ec3596bef886aa14c15867f7017c76f67340f3ba069505daa1f35f0dc551fc2d" name="samba-ldb-ldap-modules-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="cc81cc5b913c00653c1c2f1edf7a5065967d424c2ebc1e68f0462888cf2731a0" name="samba-libs-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="46f948c9bd4305222334294ec73920fd4593bed92ab417889f4e4479817747aa" name="samba-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="902ef927c3050e93089a4b05a52aae3e45d3e3bf422332ffdab2cd9c2b1ded2a" name="samba-test-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="6cbeb807a7ecf5086dae27f78750df058557252a200be3ead84f7911cc59d6fa" name="samba-test-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="624eb181088461c29f9802dcf39f8895a33534dc63f7eaa3e2fa9f507511a877" name="samba-vfs-iouring-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="a904b31aa59d405ef53f0019c7aaf38d4f68d5a5eef6b82209f0ab3fc2dfaee7" name="samba-winbind-clients-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="cb835b4f752efb5652cee54e42b8b2615b0eac857ecca903fbe19dfb18373e06" name="samba-winbind-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="238c1fb95c70252f0e422d04aee56c91e2d1d1598453615d24397fafbef2c73c" name="samba-winbind-krb5-locator-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="7cbe4d79be68dcaffd4074aa1761da9cb8dd1995ce05e9063de3d446613d04f9" name="samba-winbind-modules-debuginfo" arch="i686">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="f17a3160af2979776870761660594033c8b6925866fbb066cbea2e4666dbbf9d" name="samba-winbind-modules-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="f039947caa40c55ff36b54bd59b783cc9ace918ccf54a0d42fcd757d25e59471" name="samba-winexe-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="10.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-1" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-143401 - Fix winbind group resolution
- resolves: RHEL-141027 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-2" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144480</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-3" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144590</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-4" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-147858</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-5" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147419</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-6" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150824</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-7" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-169726</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-8" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169665</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-9" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-10" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="0a5a069029b640e163328e6a9e57d48cc0ef50abee17322a9d783114fbf3ee29" name="sed-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.8" rel="10.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 4.8-10" date="1769169600">- lib/dfa.c: Increase the maximum size of the transitions table
- After changes introduced between sed 4.2 and 4.4, some regexps
  started to hit the table size limits. This lead to repeated deletion
  and rebuilding of the table, leading to massive performance drops.
  While the core issue is still present, this change should at least
  help by moving the threshold of the regexp complexity that triggers the 
  table rebuilds.
- Resolves: RHEL-144026</changelog>
</package>
<package pkgid="cde31164244f21da174e3ab47fefd2cb7a4774a0ef6f05bceb140cea6f2c364a" name="sed-debugsource" arch="x86_64">
  <version epoch="0" ver="4.8" rel="10.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 4.8-10" date="1769169600">- lib/dfa.c: Increase the maximum size of the transitions table
- After changes introduced between sed 4.2 and 4.4, some regexps
  started to hit the table size limits. This lead to repeated deletion
  and rebuilding of the table, leading to massive performance drops.
  While the core issue is still present, this change should at least
  help by moving the threshold of the regexp complexity that triggers the 
  table rebuilds.
- Resolves: RHEL-144026</changelog>
</package>
<package pkgid="8f024936d1c6dd7deb2bccc92afedca0d6c387b56eaea2a6898660802f5993c6" name="sg3_utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.47" rel="10.el9_8.1"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 1.47-10" date="1730808000">- Skip symlink generation for multipath (RHEL-29139)</changelog>
  <changelog author="Paul Evans &lt;pevans@redhat.com&gt; - 1.47-10.1" date="1782388800">- sg_inq output conformance for SCSI name string and ATA fields (RHEL-188130)</changelog>
</package>
<package pkgid="70a561b5ec015c383a764e839d5e3fce09a1893db60fc67abacf9b17852666df" name="sg3_utils-debugsource" arch="i686">
  <version epoch="0" ver="1.47" rel="10.el9_8.1"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 1.47-10" date="1730808000">- Skip symlink generation for multipath (RHEL-29139)</changelog>
  <changelog author="Paul Evans &lt;pevans@redhat.com&gt; - 1.47-10.1" date="1782388800">- sg_inq output conformance for SCSI name string and ATA fields (RHEL-188130)</changelog>
</package>
<package pkgid="93f1d3a206d686611d1bcda92b92b0dba7b8f9cbdea321457393a817949c4a01" name="sg3_utils-debugsource" arch="x86_64">
  <version epoch="0" ver="1.47" rel="10.el9_8.1"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 1.47-10" date="1730808000">- Skip symlink generation for multipath (RHEL-29139)</changelog>
  <changelog author="Paul Evans &lt;pevans@redhat.com&gt; - 1.47-10.1" date="1782388800">- sg_inq output conformance for SCSI name string and ATA fields (RHEL-188130)</changelog>
</package>
<package pkgid="2b6e6d4e9e875756ad67ef070f2e57d298e6be308a038a0ebe9d30b4a3719db9" name="sg3_utils-libs-debuginfo" arch="i686">
  <version epoch="0" ver="1.47" rel="10.el9_8.1"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 1.47-10" date="1730808000">- Skip symlink generation for multipath (RHEL-29139)</changelog>
  <changelog author="Paul Evans &lt;pevans@redhat.com&gt; - 1.47-10.1" date="1782388800">- sg_inq output conformance for SCSI name string and ATA fields (RHEL-188130)</changelog>
</package>
<package pkgid="a1a6c77f76b342a2fd72033d50048152bb4423428cc2c9b658839eeaed6edcc4" name="sg3_utils-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.47" rel="10.el9_8.1"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 1.47-10" date="1730808000">- Skip symlink generation for multipath (RHEL-29139)</changelog>
  <changelog author="Paul Evans &lt;pevans@redhat.com&gt; - 1.47-10.1" date="1782388800">- sg_inq output conformance for SCSI name string and ATA fields (RHEL-188130)</changelog>
</package>
<package pkgid="942f28df9b4a71b0f5789d4846adfc95b5496e848b4af0e19962af566e219131" name="shadow-utils-debuginfo" arch="x86_64">
  <version epoch="2" ver="4.9" rel="16.el9"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-9" date="1720008000">- login.defs: Update SHA_CRYPT_MAX_ROUNDS from 5000 to 100000. Resolves: RHEL-40195</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-10" date="1726228800">- Disable sssd integration by default. Resolves: RHEL-56352</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-12" date="1730721600">- salt: remove rounds from salt string. Resolves: RHEL-58978</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-15" date="1748260800">- nss.c: shadow_logfd to stderr. Resolves: RHEL-83431
- vipw: restore the original terminal pgrp after editing. Resolves: RHEL-70844 and RHEL-72940</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-16" date="1765281600">- groupmod.c: --help wfix. Resolves: RHEL-130879</changelog>
</package>
<package pkgid="103c580c49e7ec53de8ce61128dd02b83eb2356b71c88973be0e24b42f2b8c20" name="shadow-utils-subid-debuginfo" arch="i686">
  <version epoch="2" ver="4.9" rel="16.el9"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-9" date="1720008000">- login.defs: Update SHA_CRYPT_MAX_ROUNDS from 5000 to 100000. Resolves: RHEL-40195</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-10" date="1726228800">- Disable sssd integration by default. Resolves: RHEL-56352</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-12" date="1730721600">- salt: remove rounds from salt string. Resolves: RHEL-58978</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-15" date="1748260800">- nss.c: shadow_logfd to stderr. Resolves: RHEL-83431
- vipw: restore the original terminal pgrp after editing. Resolves: RHEL-70844 and RHEL-72940</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-16" date="1765281600">- groupmod.c: --help wfix. Resolves: RHEL-130879</changelog>
</package>
<package pkgid="81cd7a0859904bce6c72ec96316e72b6feb129ee07ec197f78d6549217c295e9" name="shadow-utils-subid-debuginfo" arch="x86_64">
  <version epoch="2" ver="4.9" rel="16.el9"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-9" date="1720008000">- login.defs: Update SHA_CRYPT_MAX_ROUNDS from 5000 to 100000. Resolves: RHEL-40195</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-10" date="1726228800">- Disable sssd integration by default. Resolves: RHEL-56352</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-12" date="1730721600">- salt: remove rounds from salt string. Resolves: RHEL-58978</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-15" date="1748260800">- nss.c: shadow_logfd to stderr. Resolves: RHEL-83431
- vipw: restore the original terminal pgrp after editing. Resolves: RHEL-70844 and RHEL-72940</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2:4.9-16" date="1765281600">- groupmod.c: --help wfix. Resolves: RHEL-130879</changelog>
</package>
<package pkgid="89d56b4413f616e845c24ca4c50ffb713d0e81f3d2b1dfb945b814521b69f69f" name="skopeo-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.22.2" rel="6.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.19.0-1" date="1749556800">- update to https://github.com/containers/skopeo/releases/tag/v1.19.0
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.19.0-2" date="1750248000">- Do not require BATS on RHEL
- Resolves: RHEL-97592</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.20.0-1" date="1754913600">- update to https://github.com/containers/skopeo/releases/tag/v1.20.0
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.20.0-2" date="1763726400">- rebuild for CVE-2025-58183
- Resolves: RHEL-125721</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.21.0-1" date="1770206400">- update to https://github.com/containers/skopeo/releases/tag/v1.21.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.22.0-1" date="1770897600">- update to https://github.com/containers/skopeo/releases/tag/v1.22.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.22.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-68121
- Resolves: RHEL-149649</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.22.2-1" date="1776254400">- update to https://github.com/containers/skopeo/releases/tag/v1.22.2
- fixes signature verification of images which only sign the per-platform
  manifest in skopeo proxy
- Resolves: RHEL-168166</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.22.2-5" date="1777896000">- Rebuild for CVE-2026-25679
- Re-add test file installation to fix tier0 tests
- Resolves: RHEL-158789</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.22.2-6" date="1778155200">- Rebuild for CVE-2026-32283
- Resolves: RHEL-167688</changelog>
</package>
<package pkgid="cda0cb993bbcef91f1ef90e8aa60b9f74bed4856f68340344033bc0416e4ca0d" name="skopeo-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.22.2" rel="7.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.19.0-2" date="1750248000">- Do not require BATS on RHEL
- Resolves: RHEL-97592</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.20.0-1" date="1754913600">- update to https://github.com/containers/skopeo/releases/tag/v1.20.0
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.20.0-2" date="1763726400">- rebuild for CVE-2025-58183
- Resolves: RHEL-125721</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.21.0-1" date="1770206400">- update to https://github.com/containers/skopeo/releases/tag/v1.21.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.22.0-1" date="1770897600">- update to https://github.com/containers/skopeo/releases/tag/v1.22.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.22.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-68121
- Resolves: RHEL-149649</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.22.2-1" date="1776254400">- update to https://github.com/containers/skopeo/releases/tag/v1.22.2
- fixes signature verification of images which only sign the per-platform
  manifest in skopeo proxy
- Resolves: RHEL-168166</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.22.2-5" date="1777896000">- Rebuild for CVE-2026-25679
- Re-add test file installation to fix tier0 tests
- Resolves: RHEL-158789</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.22.2-6" date="1778155200">- Rebuild for CVE-2026-32283
- Resolves: RHEL-167688</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.22.2-7" date="1783425600">- Rebuild for golang &gt;= 1.26.4 to fix CVE-2026-27145
- Resolves: RHEL-189898</changelog>
</package>
<package pkgid="39c109548d1fdb49b202a8a49ab658f1367c3b5e90c08cd9e40291825112e44d" name="skopeo-debugsource" arch="x86_64">
  <version epoch="2" ver="1.22.2" rel="6.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.19.0-1" date="1749556800">- update to https://github.com/containers/skopeo/releases/tag/v1.19.0
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.19.0-2" date="1750248000">- Do not require BATS on RHEL
- Resolves: RHEL-97592</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.20.0-1" date="1754913600">- update to https://github.com/containers/skopeo/releases/tag/v1.20.0
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.20.0-2" date="1763726400">- rebuild for CVE-2025-58183
- Resolves: RHEL-125721</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.21.0-1" date="1770206400">- update to https://github.com/containers/skopeo/releases/tag/v1.21.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.22.0-1" date="1770897600">- update to https://github.com/containers/skopeo/releases/tag/v1.22.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.22.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-68121
- Resolves: RHEL-149649</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.22.2-1" date="1776254400">- update to https://github.com/containers/skopeo/releases/tag/v1.22.2
- fixes signature verification of images which only sign the per-platform
  manifest in skopeo proxy
- Resolves: RHEL-168166</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.22.2-5" date="1777896000">- Rebuild for CVE-2026-25679
- Re-add test file installation to fix tier0 tests
- Resolves: RHEL-158789</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.22.2-6" date="1778155200">- Rebuild for CVE-2026-32283
- Resolves: RHEL-167688</changelog>
</package>
<package pkgid="88c9fde87712b4196ecbe2e53ef9164ba4fa62cd163c0ff93abb4e6c551b6130" name="skopeo-debugsource" arch="x86_64">
  <version epoch="2" ver="1.22.2" rel="7.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.19.0-2" date="1750248000">- Do not require BATS on RHEL
- Resolves: RHEL-97592</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.20.0-1" date="1754913600">- update to https://github.com/containers/skopeo/releases/tag/v1.20.0
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.20.0-2" date="1763726400">- rebuild for CVE-2025-58183
- Resolves: RHEL-125721</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.21.0-1" date="1770206400">- update to https://github.com/containers/skopeo/releases/tag/v1.21.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.22.0-1" date="1770897600">- update to https://github.com/containers/skopeo/releases/tag/v1.22.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.22.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-68121
- Resolves: RHEL-149649</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.22.2-1" date="1776254400">- update to https://github.com/containers/skopeo/releases/tag/v1.22.2
- fixes signature verification of images which only sign the per-platform
  manifest in skopeo proxy
- Resolves: RHEL-168166</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.22.2-5" date="1777896000">- Rebuild for CVE-2026-25679
- Re-add test file installation to fix tier0 tests
- Resolves: RHEL-158789</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.22.2-6" date="1778155200">- Rebuild for CVE-2026-32283
- Resolves: RHEL-167688</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:1.22.2-7" date="1783425600">- Rebuild for golang &gt;= 1.26.4 to fix CVE-2026-27145
- Resolves: RHEL-189898</changelog>
</package>
<package pkgid="ea43299aa34cf8b9c2b32fbfe7ac7f5d400f559d3ae8ea0f81dbdae7f77bdacd" name="smartmontools-debuginfo" arch="x86_64">
  <version epoch="1" ver="7.2" rel="10.el9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:7.2-9" date="1705406400">- smartd would not start with huge FD limits (#RHEL-15505)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:7.2-10" date="1765195200">- use tmpfiles.d to create /var/lib/smartmontools (RHEL-132500)</changelog>
</package>
<package pkgid="f93be1bc1f22f4b4247ad7c2dbb9bbe7ee7a72993b796e34e39125a95ab2931f" name="smartmontools-debugsource" arch="x86_64">
  <version epoch="1" ver="7.2" rel="10.el9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:7.2-9" date="1705406400">- smartd would not start with huge FD limits (#RHEL-15505)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:7.2-10" date="1765195200">- use tmpfiles.d to create /var/lib/smartmontools (RHEL-132500)</changelog>
</package>
<package pkgid="e18739a304b52ed93cb405bff67dcd3c1eb14b3895a83968f298e02b9b6f9e04" name="sqlite-libs-debuginfo" arch="i686">
  <version epoch="0" ver="3.34.1" rel="10.el9_8"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3.34.1-10" date="1773748800">- Enable sqlite3_deserialize and sqlite3_serialize interfaces
- Resolves: RHEL-155950</changelog>
</package>
<package pkgid="a4a9bb9edcadc38cb1c550d4776cc854e9ab365a5cab645ff67f1895a50848dd" name="sqlite-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.1" rel="10.el9_8"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3.34.1-10" date="1773748800">- Enable sqlite3_deserialize and sqlite3_serialize interfaces
- Resolves: RHEL-155950</changelog>
</package>
<package pkgid="90a2ec9665e78e604aef84c51848a9b8fe827a4d584f17dd09cdba8798b1de09" name="srp_daemon-debuginfo" arch="x86_64">
  <version epoch="0" ver="61.0" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713787200">- Rebase to upstream release v51.0
- Resolves: RHEL-24473, RHEL-23180</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730203200">- Rebase to upstream release v54.0
- Resolves: RHEL-52886, RHEL-54647, RHEL-51876</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt;" date="1746014400">- Fix data corruption in bnxt_re
- Resolves: RHEL-89179</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748347200">- Rebase to upstream release v57.0
- Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests
- Resolves: RHEL-107929, RHEL-107930</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-1" date="1764590400">- Rebase to upstream release v60.0
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-2" date="1765368000">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 60.0-3" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1767614400">- Rebase to upstream release v61.0
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-2" date="1767787200">- Rebuilt for gating testing
- Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331</changelog>
</package>
<package pkgid="7befbead706caffe96d713ebffd50ff790bbe9a43933f8e082ca69db0e5dc1d9" name="sssd-ad-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="fd6064787542bea66555fcd1e6937f17a6b21a91dcc29c200e26c3c48f194377" name="sssd-ad-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="378d3eaaee29e8d64c36d170734dae62490de269c824805e6bd5b7cdeb5818a2" name="sssd-client-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="b9954a692c3a94adca9b13ca5f3ef47e0aaed6c87538d5dfa5f952d3010a9c9d" name="sssd-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="f05de9e39a5aaa0ffe2a6b1b240e1b1a3098536784cf8d442f6450c94c6af673" name="sssd-client-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="0a6cabc99f45fb2156aa69a893ac6bb35809e413b9312399cd1666dce50044f7" name="sssd-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="16cd1d9d41ebd02336910d7e55064a35dbfd24ec98e00a58a7c978a09c17ddd4" name="sssd-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="d4efc947803d0b4742f2eb838017fbc48c2d9f2e26e73e98d965b5b7b3674536" name="sssd-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="4373b3fd8686363e70fbb82e0e611ad87d5c998886f20a1796a586bd2ffc9484" name="sssd-common-pac-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="b030287e3bda9b05778af86b7d65b2e476c902735ceeaa55f8f9a667b31e60f1" name="sssd-common-pac-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="5df80c41493ca5c7b8ecf7756e37e16c141731d40936b0ec2e164d4c00b1eefc" name="sssd-dbus-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="09b866247e6b8130b0320a611b320d712714abc48751fbd3983ecdc301dbe367" name="sssd-dbus-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="e2790e4cd4f65c085021cac8cce9aaaff78a174a1ecb9dc3f4f43e55fd412b15" name="sssd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="654ca0093c09317c4624a2cb971a31b740a58435f7ef442fefc0da0d990b4943" name="sssd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="d10a21dd388c24e47b9dba21f0c13d5b2f48daf86cb93fff0cfdaefa48b6978e" name="sssd-debugsource" arch="i686">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="f04ce5f02d2a34fe7744a4aaf9ca1b98760d2700e94e365e69a0ee4a32af9284" name="sssd-debugsource" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="f0249084da26b363b8520f05e7c00887985432145c6cfb2c8d94d3ade6e3c577" name="sssd-idp-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="9625e0379cf0b50e73a24ca34614dfa4f912c73ca266af407aad8c37989485c9" name="sssd-ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="cfcfa7695b7d971766bbbd6d9a5d4ec466532e981d50c8eedee6eae48b7690cb" name="sssd-ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="54699dd857714c1a1abff9f340f8576449f21c731413a3550dcad632318f158c" name="sssd-kcm-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="cc2dc6031123bb80b74cf481fed40fcea9351109a24215825a06e5c4da3562e8" name="sssd-kcm-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="e0e43eb0202ad3ad6e4e4e78402ceaada01a530e186bbe749ae6022541d07c15" name="sssd-krb5-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="5deeadf9935e332aebf5e7df729178b258d96fc04c23f4dd5fc3d09c2dea6e46" name="sssd-krb5-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="59475a84ac1edf88d6ce8266ba7527162140de601b5d5e83dfb7ab38b3409f63" name="sssd-krb5-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="b0061492bf9d0a1172a5e9ed4983e952510beb420618596b425a79d8d1569262" name="sssd-krb5-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="45ca87b65af93b6091868026b5fa90d5cb1b3b4287b3b8028eb32ceead00e605" name="sssd-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="558b14ac20f5e89df5d4c52898ba1098af209600ff5c35fc93fd9fd5183c37c1" name="sssd-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="a71a9f79af646610e876e7bcd435018fd5b4bcc02e4d9ac058d3885816505072" name="sssd-nfs-idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="7cd3624a5436e46e7fbceb6ad914462e2c5e02c2db7dc33aa4f1c43e0cabaa37" name="sssd-nfs-idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="5451c9114d8ef61cddc97aa0d93642ffd0a2faf78cbf2566f454a39ee221d568" name="sssd-passkey-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="c285896c4cf8a9d59f1ffa65a35c7d6281488641ae80d9b691c22293b52380d9" name="sssd-passkey-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="650db465fad084dea99f31ef891236a4fc0112e8be2398b50ace3a32162cd278" name="sssd-proxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="7185d03fce812904eb60939718879bc6e60f70e7c94d06a1032598b216296ff0" name="sssd-proxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="8d4a75a5131b83cd09d1e3f16ccdf083c297ec61b340f8b5d5e34a84b8843b61" name="sssd-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="7b78f90a56db2952dbeb3e619da6813d871374d1776e6e2c7eb6b39ce7ae1a2e" name="sssd-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="1cf908d6188f23c3cb8d3a6a0ad43ce48a5f96336c524999a191f0370a74da40" name="sssd-winbind-idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="58cb8952a1a74d43e1f687b68308db970ef5adc5051fd3e543f57334c7ac34fc" name="sssd-winbind-idmap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="316d8dd54e65b099bfadf6f549965bd9a67a2e76c4b80f6e73430fd074ffa3dd" name="sudo-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.9.17p2" rel="3.el9_8"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.9.5p2-13" date="1745582400">RHEL: 9.7.0 ERRATUM
- sudo missing spacing and separator in log when using "--preserve-env=list"
Resolves: RHEL-71916
- CVE-2025-32462 sudo: LPE via host option
Resolves: RHEL-100020</changelog>
  <changelog author="Alejandro L&#xF3;pez &lt;allopez@redhat.com&gt; - 1.9.17p2-2" date="1763380800">- Request to backport support for regex in sudo [rhel-9]
Resolves: RHEL-1376
- Rebase of sudo to 1.9.17p2 [rhel-9]
Resolves: RHEL-128623
- sudo passes SHELL environment variable twice to the shell being executed [rhel-9]
Resolves: RHEL-127359</changelog>
  <changelog author="Alejandro L&#xF3;pez &lt;allopez@redhat.com&gt; - 1.9.17p2-3" date="1775736000">- CVE-2026-35535 sudo: Privilege escalation due to failure in privilege drop calls
Resolves: RHEL-166069</changelog>
</package>
<package pkgid="6a34bbe36a71c5bdf7b20dabaf7bb558a57240eb6c6e6fe7a156554df01b416b" name="tar-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.34" rel="11.el9"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 2:1.34-7" date="1723723200">- Warn “file changed as we read it” less often</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-8" date="1765540800">- Backport upstream changes to jailify extraction directory
  Includes related gnulib changes to add openat2
  Fixes CVE-2025-45582</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-9" date="1766145600">- Fix the last patch to solve a regression with -x and --xattrs: RHEL-136277
  also, fix another tiny mistake in the patch (w/o visible consequences)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-10" date="1768219200">- Backport fix for regression in the --no-overwrite-dir option
  Upstream commit 4e742fc8674064a9fa00d4483d06aca48d5b0463, discussed
  in https://www.mail-archive.com/bug-tar@gnu.org/msg06445.html</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-11" date="1771848000">- Add upstream patch to improve error message for --one-top-level
  with absolute path (unsupported as a result of CVE-2025-45582 fix)</changelog>
</package>
<package pkgid="426732539cce44f48b63cc0651ae4ca31d2b567fb602daf484054acdaac800bf" name="tar-debugsource" arch="x86_64">
  <version epoch="2" ver="1.34" rel="11.el9"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 2:1.34-7" date="1723723200">- Warn “file changed as we read it” less often</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-8" date="1765540800">- Backport upstream changes to jailify extraction directory
  Includes related gnulib changes to add openat2
  Fixes CVE-2025-45582</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-9" date="1766145600">- Fix the last patch to solve a regression with -x and --xattrs: RHEL-136277
  also, fix another tiny mistake in the patch (w/o visible consequences)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-10" date="1768219200">- Backport fix for regression in the --no-overwrite-dir option
  Upstream commit 4e742fc8674064a9fa00d4483d06aca48d5b0463, discussed
  in https://www.mail-archive.com/bug-tar@gnu.org/msg06445.html</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2:1.34-11" date="1771848000">- Add upstream patch to improve error message for --one-top-level
  with absolute path (unsupported as a result of CVE-2025-45582 fix)</changelog>
</package>
<package pkgid="bd0ef84c0296ffd8578aa489c1a0ff72b625db4ce3d9d3ec2d6ddc2128488c19" name="tigervnc-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.0" rel="7.el9_8.1"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-2" date="1730376000">- Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability
  Resolves: RHEL-62001</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-3" date="1737028800">- Add clipboard support to x0vncserver
  Resolves: RHEL-74216</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-4" date="1737460800">- Fix crash in clipboard support in x0vncserver
  Resolves: RHEL-74216</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-1" date="1741348800">- 1.15.0
  Resolves: RHEL-78617
- Add SELinux policy rules allowing to access /proc/sys/fs/nr_open
  Resolves: RHEL-77973
- Add SELinux policy rules allowing to create directories under /root
  Resolves: RHEL-77975
- Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor
  Resolves: RHEL-80208
- Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText()
  Resolves: RHEL-80189
- Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms()
  Resolves: RHEL-80194
- Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey()
  Resolves: RHEL-80196
- Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient()
  Resolves: RHEL-80197
- Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow()
  Resolves: RHEL-80206
- Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents()
  Resolves: RHEL-80205
- Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger()
  Resolves: RHEL-80209</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-2" date="1744804800">- Fix inetd mode not working
  Resolves: RHEL-86511</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-3" date="1746014400">- Only warn about 8 characters limit, but let it proceed
  Resolves: RHEL-89432</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-4" date="1748347200">- Fix broken authentication with x0vncserver
  Resolves: RHEL-93573</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-5" date="1750680000">- Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors
  Resolves: RHEL-97284

- Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension
  Resolves: RHEL-97303

- Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore
  Resolves: RHEL-97379

- Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension
  Resolves: RHEL-97414

- Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension
  Resolves: RHEL-97429</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-7" date="1761912000">- Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation
  Resolves: RHEL-119989

- Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal
  Resolves: RHEL-120009

- Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap()
  Resolves: RHEL-120770</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-7.1" date="1776686400">- Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002,
  CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities
  Resolves: RHEL-163213
  Resolves: RHEL-163281
  Resolves: RHEL-163267
- Fix CVE-2026-34352
  Resolves: RHEL-167986</changelog>
</package>
<package pkgid="6d2d03ebeec693568a74fd13cafe17332f17ac0c8d735317c8880763f76f81fe" name="tigervnc-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.0" rel="7.el9_8.2"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-3" date="1737028800">- Add clipboard support to x0vncserver
  Resolves: RHEL-74216</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-4" date="1737460800">- Fix crash in clipboard support in x0vncserver
  Resolves: RHEL-74216</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-1" date="1741348800">- 1.15.0
  Resolves: RHEL-78617
- Add SELinux policy rules allowing to access /proc/sys/fs/nr_open
  Resolves: RHEL-77973
- Add SELinux policy rules allowing to create directories under /root
  Resolves: RHEL-77975
- Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor
  Resolves: RHEL-80208
- Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText()
  Resolves: RHEL-80189
- Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms()
  Resolves: RHEL-80194
- Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey()
  Resolves: RHEL-80196
- Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient()
  Resolves: RHEL-80197
- Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow()
  Resolves: RHEL-80206
- Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents()
  Resolves: RHEL-80205
- Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger()
  Resolves: RHEL-80209</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-2" date="1744804800">- Fix inetd mode not working
  Resolves: RHEL-86511</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-3" date="1746014400">- Only warn about 8 characters limit, but let it proceed
  Resolves: RHEL-89432</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-4" date="1748347200">- Fix broken authentication with x0vncserver
  Resolves: RHEL-93573</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-5" date="1750680000">- Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors
  Resolves: RHEL-97284

- Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension
  Resolves: RHEL-97303

- Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore
  Resolves: RHEL-97379

- Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension
  Resolves: RHEL-97414

- Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension
  Resolves: RHEL-97429</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-7" date="1761912000">- Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation
  Resolves: RHEL-119989

- Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal
  Resolves: RHEL-120009

- Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap()
  Resolves: RHEL-120770</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-7.1" date="1776686400">- Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002,
  CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities
  Resolves: RHEL-163213
  Resolves: RHEL-163281
  Resolves: RHEL-163267
- Fix CVE-2026-34352
  Resolves: RHEL-167986</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.15.0-7.2" date="1781611200">- Rebuild for updated xorg-x11-server
  Resolves: RHEL-184003</changelog>
</package>
<package pkgid="51f98221c655cbf666bbb939b9fe0913b1286c1a83dd1fd51e68f74b27fa71e2" name="tigervnc-debugsource" arch="x86_64">
  <version epoch="0" ver="1.15.0" rel="7.el9_8.1"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-2" date="1730376000">- Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability
  Resolves: RHEL-62001</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-3" date="1737028800">- Add clipboard support to x0vncserver
  Resolves: RHEL-74216</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-4" date="1737460800">- Fix crash in clipboard support in x0vncserver
  Resolves: RHEL-74216</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-1" date="1741348800">- 1.15.0
  Resolves: RHEL-78617
- Add SELinux policy rules allowing to access /proc/sys/fs/nr_open
  Resolves: RHEL-77973
- Add SELinux policy rules allowing to create directories under /root
  Resolves: RHEL-77975
- Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor
  Resolves: RHEL-80208
- Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText()
  Resolves: RHEL-80189
- Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms()
  Resolves: RHEL-80194
- Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey()
  Resolves: RHEL-80196
- Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient()
  Resolves: RHEL-80197
- Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow()
  Resolves: RHEL-80206
- Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents()
  Resolves: RHEL-80205
- Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger()
  Resolves: RHEL-80209</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-2" date="1744804800">- Fix inetd mode not working
  Resolves: RHEL-86511</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-3" date="1746014400">- Only warn about 8 characters limit, but let it proceed
  Resolves: RHEL-89432</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-4" date="1748347200">- Fix broken authentication with x0vncserver
  Resolves: RHEL-93573</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-5" date="1750680000">- Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors
  Resolves: RHEL-97284

- Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension
  Resolves: RHEL-97303

- Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore
  Resolves: RHEL-97379

- Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension
  Resolves: RHEL-97414

- Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension
  Resolves: RHEL-97429</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-7" date="1761912000">- Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation
  Resolves: RHEL-119989

- Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal
  Resolves: RHEL-120009

- Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap()
  Resolves: RHEL-120770</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-7.1" date="1776686400">- Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002,
  CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities
  Resolves: RHEL-163213
  Resolves: RHEL-163281
  Resolves: RHEL-163267
- Fix CVE-2026-34352
  Resolves: RHEL-167986</changelog>
</package>
<package pkgid="335effcf398281b2e91e6ebcb8119a8adad39a8adacb4254b3414a2b640e3bdd" name="tigervnc-debugsource" arch="x86_64">
  <version epoch="0" ver="1.15.0" rel="7.el9_8.2"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-3" date="1737028800">- Add clipboard support to x0vncserver
  Resolves: RHEL-74216</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-4" date="1737460800">- Fix crash in clipboard support in x0vncserver
  Resolves: RHEL-74216</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-1" date="1741348800">- 1.15.0
  Resolves: RHEL-78617
- Add SELinux policy rules allowing to access /proc/sys/fs/nr_open
  Resolves: RHEL-77973
- Add SELinux policy rules allowing to create directories under /root
  Resolves: RHEL-77975
- Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor
  Resolves: RHEL-80208
- Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText()
  Resolves: RHEL-80189
- Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms()
  Resolves: RHEL-80194
- Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey()
  Resolves: RHEL-80196
- Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient()
  Resolves: RHEL-80197
- Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow()
  Resolves: RHEL-80206
- Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents()
  Resolves: RHEL-80205
- Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger()
  Resolves: RHEL-80209</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-2" date="1744804800">- Fix inetd mode not working
  Resolves: RHEL-86511</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-3" date="1746014400">- Only warn about 8 characters limit, but let it proceed
  Resolves: RHEL-89432</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-4" date="1748347200">- Fix broken authentication with x0vncserver
  Resolves: RHEL-93573</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-5" date="1750680000">- Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors
  Resolves: RHEL-97284

- Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension
  Resolves: RHEL-97303

- Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore
  Resolves: RHEL-97379

- Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension
  Resolves: RHEL-97414

- Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension
  Resolves: RHEL-97429</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-7" date="1761912000">- Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation
  Resolves: RHEL-119989

- Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal
  Resolves: RHEL-120009

- Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap()
  Resolves: RHEL-120770</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-7.1" date="1776686400">- Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002,
  CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities
  Resolves: RHEL-163213
  Resolves: RHEL-163281
  Resolves: RHEL-163267
- Fix CVE-2026-34352
  Resolves: RHEL-167986</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.15.0-7.2" date="1781611200">- Rebuild for updated xorg-x11-server
  Resolves: RHEL-184003</changelog>
</package>
<package pkgid="b0182839f17f87f5755924719619f8b119437a834f996e6fb6a149321c59a407" name="tigervnc-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.0" rel="7.el9_8.1"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-2" date="1730376000">- Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability
  Resolves: RHEL-62001</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-3" date="1737028800">- Add clipboard support to x0vncserver
  Resolves: RHEL-74216</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-4" date="1737460800">- Fix crash in clipboard support in x0vncserver
  Resolves: RHEL-74216</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-1" date="1741348800">- 1.15.0
  Resolves: RHEL-78617
- Add SELinux policy rules allowing to access /proc/sys/fs/nr_open
  Resolves: RHEL-77973
- Add SELinux policy rules allowing to create directories under /root
  Resolves: RHEL-77975
- Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor
  Resolves: RHEL-80208
- Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText()
  Resolves: RHEL-80189
- Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms()
  Resolves: RHEL-80194
- Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey()
  Resolves: RHEL-80196
- Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient()
  Resolves: RHEL-80197
- Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow()
  Resolves: RHEL-80206
- Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents()
  Resolves: RHEL-80205
- Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger()
  Resolves: RHEL-80209</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-2" date="1744804800">- Fix inetd mode not working
  Resolves: RHEL-86511</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-3" date="1746014400">- Only warn about 8 characters limit, but let it proceed
  Resolves: RHEL-89432</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-4" date="1748347200">- Fix broken authentication with x0vncserver
  Resolves: RHEL-93573</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-5" date="1750680000">- Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors
  Resolves: RHEL-97284

- Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension
  Resolves: RHEL-97303

- Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore
  Resolves: RHEL-97379

- Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension
  Resolves: RHEL-97414

- Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension
  Resolves: RHEL-97429</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-7" date="1761912000">- Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation
  Resolves: RHEL-119989

- Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal
  Resolves: RHEL-120009

- Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap()
  Resolves: RHEL-120770</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-7.1" date="1776686400">- Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002,
  CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities
  Resolves: RHEL-163213
  Resolves: RHEL-163281
  Resolves: RHEL-163267
- Fix CVE-2026-34352
  Resolves: RHEL-167986</changelog>
</package>
<package pkgid="7311fb7ae129f402adeca5f8f3d7b4cadd74905d86ded795c6f6071f262507f6" name="tigervnc-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.0" rel="7.el9_8.2"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-3" date="1737028800">- Add clipboard support to x0vncserver
  Resolves: RHEL-74216</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-4" date="1737460800">- Fix crash in clipboard support in x0vncserver
  Resolves: RHEL-74216</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-1" date="1741348800">- 1.15.0
  Resolves: RHEL-78617
- Add SELinux policy rules allowing to access /proc/sys/fs/nr_open
  Resolves: RHEL-77973
- Add SELinux policy rules allowing to create directories under /root
  Resolves: RHEL-77975
- Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor
  Resolves: RHEL-80208
- Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText()
  Resolves: RHEL-80189
- Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms()
  Resolves: RHEL-80194
- Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey()
  Resolves: RHEL-80196
- Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient()
  Resolves: RHEL-80197
- Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow()
  Resolves: RHEL-80206
- Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents()
  Resolves: RHEL-80205
- Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger()
  Resolves: RHEL-80209</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-2" date="1744804800">- Fix inetd mode not working
  Resolves: RHEL-86511</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-3" date="1746014400">- Only warn about 8 characters limit, but let it proceed
  Resolves: RHEL-89432</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-4" date="1748347200">- Fix broken authentication with x0vncserver
  Resolves: RHEL-93573</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-5" date="1750680000">- Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors
  Resolves: RHEL-97284

- Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension
  Resolves: RHEL-97303

- Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore
  Resolves: RHEL-97379

- Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension
  Resolves: RHEL-97414

- Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension
  Resolves: RHEL-97429</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-7" date="1761912000">- Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation
  Resolves: RHEL-119989

- Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal
  Resolves: RHEL-120009

- Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap()
  Resolves: RHEL-120770</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-7.1" date="1776686400">- Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002,
  CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities
  Resolves: RHEL-163213
  Resolves: RHEL-163281
  Resolves: RHEL-163267
- Fix CVE-2026-34352
  Resolves: RHEL-167986</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.15.0-7.2" date="1781611200">- Rebuild for updated xorg-x11-server
  Resolves: RHEL-184003</changelog>
</package>
<package pkgid="154e9b8bfe4c4fa2f66c739f6bac24bd16d9e8a77b614f5a0669a854e5bbab74" name="tigervnc-server-minimal-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.0" rel="7.el9_8.1"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-2" date="1730376000">- Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability
  Resolves: RHEL-62001</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-3" date="1737028800">- Add clipboard support to x0vncserver
  Resolves: RHEL-74216</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-4" date="1737460800">- Fix crash in clipboard support in x0vncserver
  Resolves: RHEL-74216</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-1" date="1741348800">- 1.15.0
  Resolves: RHEL-78617
- Add SELinux policy rules allowing to access /proc/sys/fs/nr_open
  Resolves: RHEL-77973
- Add SELinux policy rules allowing to create directories under /root
  Resolves: RHEL-77975
- Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor
  Resolves: RHEL-80208
- Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText()
  Resolves: RHEL-80189
- Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms()
  Resolves: RHEL-80194
- Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey()
  Resolves: RHEL-80196
- Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient()
  Resolves: RHEL-80197
- Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow()
  Resolves: RHEL-80206
- Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents()
  Resolves: RHEL-80205
- Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger()
  Resolves: RHEL-80209</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-2" date="1744804800">- Fix inetd mode not working
  Resolves: RHEL-86511</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-3" date="1746014400">- Only warn about 8 characters limit, but let it proceed
  Resolves: RHEL-89432</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-4" date="1748347200">- Fix broken authentication with x0vncserver
  Resolves: RHEL-93573</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-5" date="1750680000">- Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors
  Resolves: RHEL-97284

- Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension
  Resolves: RHEL-97303

- Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore
  Resolves: RHEL-97379

- Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension
  Resolves: RHEL-97414

- Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension
  Resolves: RHEL-97429</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-7" date="1761912000">- Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation
  Resolves: RHEL-119989

- Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal
  Resolves: RHEL-120009

- Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap()
  Resolves: RHEL-120770</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-7.1" date="1776686400">- Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002,
  CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities
  Resolves: RHEL-163213
  Resolves: RHEL-163281
  Resolves: RHEL-163267
- Fix CVE-2026-34352
  Resolves: RHEL-167986</changelog>
</package>
<package pkgid="3742791a32bdf6446b0c8fd00369f11eb42fab949532d0a0078a42186da5f856" name="tigervnc-server-minimal-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.0" rel="7.el9_8.2"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-3" date="1737028800">- Add clipboard support to x0vncserver
  Resolves: RHEL-74216</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-4" date="1737460800">- Fix crash in clipboard support in x0vncserver
  Resolves: RHEL-74216</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-1" date="1741348800">- 1.15.0
  Resolves: RHEL-78617
- Add SELinux policy rules allowing to access /proc/sys/fs/nr_open
  Resolves: RHEL-77973
- Add SELinux policy rules allowing to create directories under /root
  Resolves: RHEL-77975
- Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor
  Resolves: RHEL-80208
- Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText()
  Resolves: RHEL-80189
- Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms()
  Resolves: RHEL-80194
- Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey()
  Resolves: RHEL-80196
- Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient()
  Resolves: RHEL-80197
- Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow()
  Resolves: RHEL-80206
- Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents()
  Resolves: RHEL-80205
- Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger()
  Resolves: RHEL-80209</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-2" date="1744804800">- Fix inetd mode not working
  Resolves: RHEL-86511</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-3" date="1746014400">- Only warn about 8 characters limit, but let it proceed
  Resolves: RHEL-89432</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-4" date="1748347200">- Fix broken authentication with x0vncserver
  Resolves: RHEL-93573</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-5" date="1750680000">- Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors
  Resolves: RHEL-97284

- Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension
  Resolves: RHEL-97303

- Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore
  Resolves: RHEL-97379

- Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension
  Resolves: RHEL-97414

- Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension
  Resolves: RHEL-97429</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-7" date="1761912000">- Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation
  Resolves: RHEL-119989

- Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal
  Resolves: RHEL-120009

- Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap()
  Resolves: RHEL-120770</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-7.1" date="1776686400">- Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002,
  CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities
  Resolves: RHEL-163213
  Resolves: RHEL-163281
  Resolves: RHEL-163267
- Fix CVE-2026-34352
  Resolves: RHEL-167986</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.15.0-7.2" date="1781611200">- Rebuild for updated xorg-x11-server
  Resolves: RHEL-184003</changelog>
</package>
<package pkgid="e55524313707af1889e81de6135a690fe12955d875a1f8ba5ba67ed8d2ab48eb" name="tigervnc-server-module-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.0" rel="7.el9_8.1"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-2" date="1730376000">- Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability
  Resolves: RHEL-62001</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-3" date="1737028800">- Add clipboard support to x0vncserver
  Resolves: RHEL-74216</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-4" date="1737460800">- Fix crash in clipboard support in x0vncserver
  Resolves: RHEL-74216</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-1" date="1741348800">- 1.15.0
  Resolves: RHEL-78617
- Add SELinux policy rules allowing to access /proc/sys/fs/nr_open
  Resolves: RHEL-77973
- Add SELinux policy rules allowing to create directories under /root
  Resolves: RHEL-77975
- Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor
  Resolves: RHEL-80208
- Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText()
  Resolves: RHEL-80189
- Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms()
  Resolves: RHEL-80194
- Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey()
  Resolves: RHEL-80196
- Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient()
  Resolves: RHEL-80197
- Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow()
  Resolves: RHEL-80206
- Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents()
  Resolves: RHEL-80205
- Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger()
  Resolves: RHEL-80209</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-2" date="1744804800">- Fix inetd mode not working
  Resolves: RHEL-86511</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-3" date="1746014400">- Only warn about 8 characters limit, but let it proceed
  Resolves: RHEL-89432</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-4" date="1748347200">- Fix broken authentication with x0vncserver
  Resolves: RHEL-93573</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-5" date="1750680000">- Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors
  Resolves: RHEL-97284

- Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension
  Resolves: RHEL-97303

- Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore
  Resolves: RHEL-97379

- Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension
  Resolves: RHEL-97414

- Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension
  Resolves: RHEL-97429</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-7" date="1761912000">- Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation
  Resolves: RHEL-119989

- Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal
  Resolves: RHEL-120009

- Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap()
  Resolves: RHEL-120770</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-7.1" date="1776686400">- Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002,
  CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities
  Resolves: RHEL-163213
  Resolves: RHEL-163281
  Resolves: RHEL-163267
- Fix CVE-2026-34352
  Resolves: RHEL-167986</changelog>
</package>
<package pkgid="47473d46a6f7a95dfadea82a69b87f2647380ac87505e2583cb52fbdf9ae34c1" name="tigervnc-server-module-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.0" rel="7.el9_8.2"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-3" date="1737028800">- Add clipboard support to x0vncserver
  Resolves: RHEL-74216</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.14.1-4" date="1737460800">- Fix crash in clipboard support in x0vncserver
  Resolves: RHEL-74216</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-1" date="1741348800">- 1.15.0
  Resolves: RHEL-78617
- Add SELinux policy rules allowing to access /proc/sys/fs/nr_open
  Resolves: RHEL-77973
- Add SELinux policy rules allowing to create directories under /root
  Resolves: RHEL-77975
- Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor
  Resolves: RHEL-80208
- Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText()
  Resolves: RHEL-80189
- Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms()
  Resolves: RHEL-80194
- Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey()
  Resolves: RHEL-80196
- Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient()
  Resolves: RHEL-80197
- Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow()
  Resolves: RHEL-80206
- Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents()
  Resolves: RHEL-80205
- Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger()
  Resolves: RHEL-80209</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-2" date="1744804800">- Fix inetd mode not working
  Resolves: RHEL-86511</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-3" date="1746014400">- Only warn about 8 characters limit, but let it proceed
  Resolves: RHEL-89432</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-4" date="1748347200">- Fix broken authentication with x0vncserver
  Resolves: RHEL-93573</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-5" date="1750680000">- Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors
  Resolves: RHEL-97284

- Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension
  Resolves: RHEL-97303

- Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore
  Resolves: RHEL-97379

- Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension
  Resolves: RHEL-97414

- Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension
  Resolves: RHEL-97429</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-7" date="1761912000">- Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation
  Resolves: RHEL-119989

- Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal
  Resolves: RHEL-120009

- Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap()
  Resolves: RHEL-120770</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.15.0-7.1" date="1776686400">- Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002,
  CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities
  Resolves: RHEL-163213
  Resolves: RHEL-163281
  Resolves: RHEL-163267
- Fix CVE-2026-34352
  Resolves: RHEL-167986</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.15.0-7.2" date="1781611200">- Rebuild for updated xorg-x11-server
  Resolves: RHEL-184003</changelog>
</package>
<package pkgid="330f073ae3949693161782f68d84c44e0a7ee3dd147017c78544298a706db90b" name="trace-cmd-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="3.el9"/>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-1" date="1740484800">- Rebase to version 3.3.1 (RHEL-76155)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-2" date="1741694400">- Rebuild without side-tags (RHEL-76155)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-3" date="1770206400">- Fix trace messages (RHEL-86597)</changelog>
</package>
<package pkgid="e1ceb10751bd52d2e9f9a7f91f4317716900832d41ab2d62d1b44b7019dfb449" name="unbound-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.24.2" rel="3.el9_8.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-18" date="1747224000">- Prevent unbounded name compression (CVE-2024-8508)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-19" date="1750766400">- Fix regression on update introduced by local-root symlink
- Resolves: RHEL-92255</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-20" date="1752667200">- Fix verification of unbound-control key files
- Resolves: RHEL-65396</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-21" date="1753704000">- Fix RebirthDay Attack (CVE-2025-5994)
- Resolves: RHEL-104129</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-22" date="1762862400">- Create root key if missing automatically (RHEL-127540)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-23" date="1762862401">- Do not verify root.key in libs (RHEL-64339)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-24" date="1762862402">- Add new root key 38696 (RHEL-77716)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.24.2-2" date="1770638400">- Switch TLS configuration to follow TLS sockets by crypto-policy again
  (RHEL-147860)
- Change the default of tls-use-system-policy-versions at build-time</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.24.2-3" date="1772020800">- Install correct trust anchor source in Image Mode (RHEL-127540)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 1.24.2-3.1" date="1779710400">- Fix CVE-2026-33278 (RHEL‑177822)
  Fix CVE-2026-42944 (RHEL-177936)
  Fix CVE-2026-42959 (RHEL-177797)</changelog>
</package>
<package pkgid="9ffa822ba67add512aa07a52ce8b840d4397c4b64676a3c976c32f91b88d1d2d" name="unbound-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.24.2" rel="3.el9_8.2"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-19" date="1750766400">- Fix regression on update introduced by local-root symlink
- Resolves: RHEL-92255</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-20" date="1752667200">- Fix verification of unbound-control key files
- Resolves: RHEL-65396</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-21" date="1753704000">- Fix RebirthDay Attack (CVE-2025-5994)
- Resolves: RHEL-104129</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-22" date="1762862400">- Create root key if missing automatically (RHEL-127540)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-23" date="1762862401">- Do not verify root.key in libs (RHEL-64339)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-24" date="1762862402">- Add new root key 38696 (RHEL-77716)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.24.2-2" date="1770638400">- Switch TLS configuration to follow TLS sockets by crypto-policy again
  (RHEL-147860)
- Change the default of tls-use-system-policy-versions at build-time</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.24.2-3" date="1772020800">- Install correct trust anchor source in Image Mode (RHEL-127540)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 1.24.2-3.1" date="1779710400">- Fix CVE-2026-33278 (RHEL-177822)
  Fix CVE-2026-42944 (RHEL-177936)
  Fix CVE-2026-42959 (RHEL-177797)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 1.24.2-3.2" date="1782129600">- Fix CVE-2026-40622 (RHEL-184840)
  Fix CVE-2026-44390 (RHEL-186688)
  Fix CVE-2026-41292 (RHEL-187352)
  Fix CVE-2026-42534 (RHEL-187095)</changelog>
</package>
<package pkgid="33c9a05e5c2751c615fd3382775c68eb575db24947380f44d4e48fe6d7eff1dd" name="unbound-debugsource" arch="i686">
  <version epoch="0" ver="1.24.2" rel="3.el9_8.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-18" date="1747224000">- Prevent unbounded name compression (CVE-2024-8508)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-19" date="1750766400">- Fix regression on update introduced by local-root symlink
- Resolves: RHEL-92255</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-20" date="1752667200">- Fix verification of unbound-control key files
- Resolves: RHEL-65396</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-21" date="1753704000">- Fix RebirthDay Attack (CVE-2025-5994)
- Resolves: RHEL-104129</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-22" date="1762862400">- Create root key if missing automatically (RHEL-127540)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-23" date="1762862401">- Do not verify root.key in libs (RHEL-64339)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-24" date="1762862402">- Add new root key 38696 (RHEL-77716)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.24.2-2" date="1770638400">- Switch TLS configuration to follow TLS sockets by crypto-policy again
  (RHEL-147860)
- Change the default of tls-use-system-policy-versions at build-time</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.24.2-3" date="1772020800">- Install correct trust anchor source in Image Mode (RHEL-127540)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 1.24.2-3.1" date="1779710400">- Fix CVE-2026-33278 (RHEL‑177822)
  Fix CVE-2026-42944 (RHEL-177936)
  Fix CVE-2026-42959 (RHEL-177797)</changelog>
</package>
<package pkgid="4058ebb954b2aefb94127e397cacdf66190a62e6b899a16a5aa0f5f72b717fca" name="unbound-debugsource" arch="x86_64">
  <version epoch="0" ver="1.24.2" rel="3.el9_8.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-18" date="1747224000">- Prevent unbounded name compression (CVE-2024-8508)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-19" date="1750766400">- Fix regression on update introduced by local-root symlink
- Resolves: RHEL-92255</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-20" date="1752667200">- Fix verification of unbound-control key files
- Resolves: RHEL-65396</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-21" date="1753704000">- Fix RebirthDay Attack (CVE-2025-5994)
- Resolves: RHEL-104129</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-22" date="1762862400">- Create root key if missing automatically (RHEL-127540)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-23" date="1762862401">- Do not verify root.key in libs (RHEL-64339)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-24" date="1762862402">- Add new root key 38696 (RHEL-77716)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.24.2-2" date="1770638400">- Switch TLS configuration to follow TLS sockets by crypto-policy again
  (RHEL-147860)
- Change the default of tls-use-system-policy-versions at build-time</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.24.2-3" date="1772020800">- Install correct trust anchor source in Image Mode (RHEL-127540)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 1.24.2-3.1" date="1779710400">- Fix CVE-2026-33278 (RHEL‑177822)
  Fix CVE-2026-42944 (RHEL-177936)
  Fix CVE-2026-42959 (RHEL-177797)</changelog>
</package>
<package pkgid="3dd569f7d40f3daa5686e3711b70bed38979d398b476a518406f457c63789a65" name="unbound-debugsource" arch="i686">
  <version epoch="0" ver="1.24.2" rel="3.el9_8.2"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-19" date="1750766400">- Fix regression on update introduced by local-root symlink
- Resolves: RHEL-92255</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-20" date="1752667200">- Fix verification of unbound-control key files
- Resolves: RHEL-65396</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-21" date="1753704000">- Fix RebirthDay Attack (CVE-2025-5994)
- Resolves: RHEL-104129</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-22" date="1762862400">- Create root key if missing automatically (RHEL-127540)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-23" date="1762862401">- Do not verify root.key in libs (RHEL-64339)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-24" date="1762862402">- Add new root key 38696 (RHEL-77716)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.24.2-2" date="1770638400">- Switch TLS configuration to follow TLS sockets by crypto-policy again
  (RHEL-147860)
- Change the default of tls-use-system-policy-versions at build-time</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.24.2-3" date="1772020800">- Install correct trust anchor source in Image Mode (RHEL-127540)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 1.24.2-3.1" date="1779710400">- Fix CVE-2026-33278 (RHEL-177822)
  Fix CVE-2026-42944 (RHEL-177936)
  Fix CVE-2026-42959 (RHEL-177797)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 1.24.2-3.2" date="1782129600">- Fix CVE-2026-40622 (RHEL-184840)
  Fix CVE-2026-44390 (RHEL-186688)
  Fix CVE-2026-41292 (RHEL-187352)
  Fix CVE-2026-42534 (RHEL-187095)</changelog>
</package>
<package pkgid="e5316ae2c85cab935e54804fe3f0f311df39a7f904e2e127801e6c9f2c272f61" name="unbound-debugsource" arch="x86_64">
  <version epoch="0" ver="1.24.2" rel="3.el9_8.2"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-19" date="1750766400">- Fix regression on update introduced by local-root symlink
- Resolves: RHEL-92255</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-20" date="1752667200">- Fix verification of unbound-control key files
- Resolves: RHEL-65396</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-21" date="1753704000">- Fix RebirthDay Attack (CVE-2025-5994)
- Resolves: RHEL-104129</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-22" date="1762862400">- Create root key if missing automatically (RHEL-127540)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-23" date="1762862401">- Do not verify root.key in libs (RHEL-64339)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-24" date="1762862402">- Add new root key 38696 (RHEL-77716)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.24.2-2" date="1770638400">- Switch TLS configuration to follow TLS sockets by crypto-policy again
  (RHEL-147860)
- Change the default of tls-use-system-policy-versions at build-time</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.24.2-3" date="1772020800">- Install correct trust anchor source in Image Mode (RHEL-127540)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 1.24.2-3.1" date="1779710400">- Fix CVE-2026-33278 (RHEL-177822)
  Fix CVE-2026-42944 (RHEL-177936)
  Fix CVE-2026-42959 (RHEL-177797)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 1.24.2-3.2" date="1782129600">- Fix CVE-2026-40622 (RHEL-184840)
  Fix CVE-2026-44390 (RHEL-186688)
  Fix CVE-2026-41292 (RHEL-187352)
  Fix CVE-2026-42534 (RHEL-187095)</changelog>
</package>
<package pkgid="b8aa55544010a98e0f20fe6a61f9b72b4e38d1b407be889fb5c5ed7c8d1d9b82" name="unbound-libs-debuginfo" arch="i686">
  <version epoch="0" ver="1.24.2" rel="3.el9_8.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-18" date="1747224000">- Prevent unbounded name compression (CVE-2024-8508)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-19" date="1750766400">- Fix regression on update introduced by local-root symlink
- Resolves: RHEL-92255</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-20" date="1752667200">- Fix verification of unbound-control key files
- Resolves: RHEL-65396</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-21" date="1753704000">- Fix RebirthDay Attack (CVE-2025-5994)
- Resolves: RHEL-104129</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-22" date="1762862400">- Create root key if missing automatically (RHEL-127540)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-23" date="1762862401">- Do not verify root.key in libs (RHEL-64339)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-24" date="1762862402">- Add new root key 38696 (RHEL-77716)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.24.2-2" date="1770638400">- Switch TLS configuration to follow TLS sockets by crypto-policy again
  (RHEL-147860)
- Change the default of tls-use-system-policy-versions at build-time</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.24.2-3" date="1772020800">- Install correct trust anchor source in Image Mode (RHEL-127540)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 1.24.2-3.1" date="1779710400">- Fix CVE-2026-33278 (RHEL‑177822)
  Fix CVE-2026-42944 (RHEL-177936)
  Fix CVE-2026-42959 (RHEL-177797)</changelog>
</package>
<package pkgid="ff4a6c5281f8737fa5c4cc8e7a4c8568475514cef626f03172ca26efea6a86e4" name="unbound-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.24.2" rel="3.el9_8.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-18" date="1747224000">- Prevent unbounded name compression (CVE-2024-8508)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-19" date="1750766400">- Fix regression on update introduced by local-root symlink
- Resolves: RHEL-92255</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-20" date="1752667200">- Fix verification of unbound-control key files
- Resolves: RHEL-65396</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-21" date="1753704000">- Fix RebirthDay Attack (CVE-2025-5994)
- Resolves: RHEL-104129</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-22" date="1762862400">- Create root key if missing automatically (RHEL-127540)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-23" date="1762862401">- Do not verify root.key in libs (RHEL-64339)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-24" date="1762862402">- Add new root key 38696 (RHEL-77716)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.24.2-2" date="1770638400">- Switch TLS configuration to follow TLS sockets by crypto-policy again
  (RHEL-147860)
- Change the default of tls-use-system-policy-versions at build-time</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.24.2-3" date="1772020800">- Install correct trust anchor source in Image Mode (RHEL-127540)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 1.24.2-3.1" date="1779710400">- Fix CVE-2026-33278 (RHEL‑177822)
  Fix CVE-2026-42944 (RHEL-177936)
  Fix CVE-2026-42959 (RHEL-177797)</changelog>
</package>
<package pkgid="dcddd10a9e4d65375becadb1400754d0870f112106380fb634ebf7429653f4fc" name="unbound-libs-debuginfo" arch="i686">
  <version epoch="0" ver="1.24.2" rel="3.el9_8.2"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-19" date="1750766400">- Fix regression on update introduced by local-root symlink
- Resolves: RHEL-92255</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-20" date="1752667200">- Fix verification of unbound-control key files
- Resolves: RHEL-65396</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-21" date="1753704000">- Fix RebirthDay Attack (CVE-2025-5994)
- Resolves: RHEL-104129</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-22" date="1762862400">- Create root key if missing automatically (RHEL-127540)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-23" date="1762862401">- Do not verify root.key in libs (RHEL-64339)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-24" date="1762862402">- Add new root key 38696 (RHEL-77716)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.24.2-2" date="1770638400">- Switch TLS configuration to follow TLS sockets by crypto-policy again
  (RHEL-147860)
- Change the default of tls-use-system-policy-versions at build-time</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.24.2-3" date="1772020800">- Install correct trust anchor source in Image Mode (RHEL-127540)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 1.24.2-3.1" date="1779710400">- Fix CVE-2026-33278 (RHEL-177822)
  Fix CVE-2026-42944 (RHEL-177936)
  Fix CVE-2026-42959 (RHEL-177797)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 1.24.2-3.2" date="1782129600">- Fix CVE-2026-40622 (RHEL-184840)
  Fix CVE-2026-44390 (RHEL-186688)
  Fix CVE-2026-41292 (RHEL-187352)
  Fix CVE-2026-42534 (RHEL-187095)</changelog>
</package>
<package pkgid="e74402f25b20dd0f18710352465f99256ce899e78f9308c9a59f4e335d33084d" name="unbound-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.24.2" rel="3.el9_8.2"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-19" date="1750766400">- Fix regression on update introduced by local-root symlink
- Resolves: RHEL-92255</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-20" date="1752667200">- Fix verification of unbound-control key files
- Resolves: RHEL-65396</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.16.2-21" date="1753704000">- Fix RebirthDay Attack (CVE-2025-5994)
- Resolves: RHEL-104129</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-22" date="1762862400">- Create root key if missing automatically (RHEL-127540)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-23" date="1762862401">- Do not verify root.key in libs (RHEL-64339)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.16.2-24" date="1762862402">- Add new root key 38696 (RHEL-77716)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.24.2-2" date="1770638400">- Switch TLS configuration to follow TLS sockets by crypto-policy again
  (RHEL-147860)
- Change the default of tls-use-system-policy-versions at build-time</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.24.2-3" date="1772020800">- Install correct trust anchor source in Image Mode (RHEL-127540)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 1.24.2-3.1" date="1779710400">- Fix CVE-2026-33278 (RHEL-177822)
  Fix CVE-2026-42944 (RHEL-177936)
  Fix CVE-2026-42959 (RHEL-177797)</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 1.24.2-3.2" date="1782129600">- Fix CVE-2026-40622 (RHEL-184840)
  Fix CVE-2026-44390 (RHEL-186688)
  Fix CVE-2026-41292 (RHEL-187352)
  Fix CVE-2026-42534 (RHEL-187095)</changelog>
</package>
<package pkgid="fcc3353ee9a249295880792f40abd9af1bc72d389c3d2b61a6c674b2639b2a43" name="util-linux-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="cd578aa320518d7a2d65945bc0ebfc60752eed77a2f2f3e5c85d89f0803f76cb" name="util-linux-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="7a3bd38c8755d26dbd9c351d1385ed9a014386dfa38e1ab3e8d87e10bb3dd19d" name="util-linux-user-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.37.4" rel="25.el9"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-16" date="1707307200">- fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
- fix RHEL-21257 - logger sending process start time not current time with log messages
- fix RHEL-16071 - issues in libblkid
- fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
- fix RHEL-14612 - Userspace mount options are not preserved for NFS</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-17" date="1707393600">- lscpu: update tests, follow max freq for scaling (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-18" date="1707393601">- lscpu: another tests update (RHEL-12783)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-19" date="1724155200">- fix RHEL-34165 - lsipc: fix semaphore USED counter
- fix RHEL-25265 - libblkid: Check offset in LUKS2 header
- fix RHEL-25559 - more: fix poll() use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-20" date="1724328000">- fix RHEL-25559 - more: make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-21" date="1737028800">- fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
- fix RHEL-56983 - sulogin: fix POSIX locale use</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-22" date="1760356800">- fix RHEL-113638 - lscpu: update ARM identifiers
- fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-23" date="1762776000">- fix RHEL-123527 - mount: improve --all documentation
- fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
- fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-24" date="1765800000">- fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.37.4-25" date="1768824000">- fix RHEL-132706 - use sysusers.d for uuidd</changelog>
</package>
<package pkgid="1e5646ae9359dd8dfc97cfcf0148e87d8e8773fc396c2781900aeb4032caf130" name="valkey-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.0.9" rel="1.el9_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 7.2.6.1" date="1722945600">- rebase to 7.2.6
- merge limit.conf in main service files
- drop /etc/sysconfig/valkey
- rename compat package
- fix working dir
- partially enable upstream test suite</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.2.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 8.0.2.1" date="1737633600">- rebase to 8.0.2
  Resolves: RHEL-73273</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 8.0.3.1" date="1745496000">- rebase to 8.0.3</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 8.0.4-1" date="1752667200">- rebase to 8.0.4 for CVE-2025-27151 CVE-2025-48367 and CVE-2025-32023</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 8.0.4-2" date="1754049600">- fix ImageMode: add tmpfiles.d entries for directories below /var</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 8.0.4-3" date="1757419200">- fix ImageMode: ensure ownership of /etc/valkey</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 8.0.6-2" date="1760702400">- rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 8.0.7-1" date="1772452800">- Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 8.0.9-1" date="1779192000">- Rebase to 8.0.9 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631</changelog>
</package>
<package pkgid="b4e2a76bbe6673f49d701994bfb4bd0a1124f2fb124935bca436879f5ce5175d" name="valkey-debugsource" arch="x86_64">
  <version epoch="0" ver="8.0.9" rel="1.el9_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 7.2.6.1" date="1722945600">- rebase to 7.2.6
- merge limit.conf in main service files
- drop /etc/sysconfig/valkey
- rename compat package
- fix working dir
- partially enable upstream test suite</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.2.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 8.0.2.1" date="1737633600">- rebase to 8.0.2
  Resolves: RHEL-73273</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 8.0.3.1" date="1745496000">- rebase to 8.0.3</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 8.0.4-1" date="1752667200">- rebase to 8.0.4 for CVE-2025-27151 CVE-2025-48367 and CVE-2025-32023</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 8.0.4-2" date="1754049600">- fix ImageMode: add tmpfiles.d entries for directories below /var</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 8.0.4-3" date="1757419200">- fix ImageMode: ensure ownership of /etc/valkey</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 8.0.6-2" date="1760702400">- rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 8.0.7-1" date="1772452800">- Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 8.0.9-1" date="1779192000">- Rebase to 8.0.9 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631</changelog>
</package>
<package pkgid="438e985eb1c980379ef99c27d2a9f869ed690e2ffe81d738998274fe53eb881f" name="veritysetup-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="3.el9"/>
  <changelog author="Daniel Zatovic &lt;dzatovic@redhat.com&gt; - 2.7.2-1" date="1714651200">- Update to cryptsetup 2.7.2
- Use OpenSLL Argon implementation instead of the built-in one
- Resolves: RHEL-32377</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-2" date="1724932800">- patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
- patch: Enable Argon2 in FIPS with openssl backend.
- patch: Abort online reencryption for misconfigured devices.
- patch: Harden online reencryption checks in initialization phase.
- patch: Fix detection of direct-io with suspended devices.
- patch: Return suspended status also for unknow target types.
- patch: Do not handle device as suspended on error.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-3" date="1725278400">- Specbump for correct target release.
- Resolves: RHEL-39003 RHEL-41238</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.2-4" date="1749038400">- patch: Ignore unknown VMK entry 24 in bitlk metadata.
- Resolves: RHEL-94860</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-1" date="1756900800">- Update to cryptsetup 2.8.1.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-2" date="1757678400">- patch: Improve check for a function attribute support.
- Resolves: 100089</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-3" date="1766059200">- patch: Read integrity profile info from top level device.
- patch: Fix possible use of uninitialized variable.
- patch: Reinstate pbkdf serialization flag in device activation.
- patch: Fix LUKS2 device status in inline HW mode and detached header.
- patch: Set inline integrity flag if no underlying dm-integrity device.
- patch: Fix wrong device size status reports in cryptsetup and integritysetup.
- Resolves: RHEL-122297 RHEL-125152 RHEL-125167 RHEL-132585 RHEL-140106</changelog>
</package>
<package pkgid="c1185d8170801243c45c640f4554e9cf4773cb410ba1d61a88c9b5cc175e1d21" name="vim-X11-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.1" date="1774440000">- RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.2" date="1774612800">- remove -O0 from flags</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.3" date="1774958400">- Related: RHEL-159630 rebuild to build with exception target</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.6" date="1779364800">- CVE-2026-41411 vim: Command injection via backticks in tag files</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.7" date="1779969600">- RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.8" date="1782129600">- RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.9" date="1782907200">- RHEL-186646 CVE-2026-52858 vim: possible code execution with
  python3complete</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.10" date="1782907201">- RHEL-186659 CVE-2026-47162 vim: code injection via
  NetrwBookHistSave()</changelog>
</package>
<package pkgid="2d9b2d613211d3a41017cb75d6d45f5ffd7cbad1bcd2080eee3f49cdeb592cad" name="vim-X11-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.13"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.6" date="1779364800">- CVE-2026-41411 vim: Command injection via backticks in tag files</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.7" date="1779969600">- RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.8" date="1782129600">- RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.9" date="1782907200">- RHEL-186646 CVE-2026-52858 vim: possible code execution with
  python3complete</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.10" date="1782907201">- RHEL-186659 CVE-2026-47162 vim: code injection via
  NetrwBookHistSave()</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.11" date="1783857600">- RHEL-194062 CVE-2026-55693 vim: out-of-bounds write in
  tree_count_words() and sug_filltree()</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.12" date="1784030400">- RHEL-191367 CVE-2026-57455 vim: Out-of-bounds write with soundfold()
- RHEL-192113 CVE-2026-57456 vim: possible code execution with
  python complete via crafted docstrings</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.13" date="1784721600">- RHEL-203985 CVE-2026-59858 vim: arbitrary Ex command execution
  in C omni-completion
- RHEL-201197 CVE-2026-59856 vim: potential command execution in
  PHP omni-completion</changelog>
</package>
<package pkgid="f1327f31ba43af50a6391e82c238651381c488582327c62e1560333f8f26c8a3" name="vim-X11-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.6"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-23" date="1758110400">- RHEL-112005 CVE-2025-53905 vim: Vim path traversial
- RHEL-112009 CVE-2025-53906 vim: Vim path traversal</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-24" date="1770033600">- RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-25" date="1770724800">- RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26" date="1773921600">- RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin
- RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.1" date="1774440000">- RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.2" date="1774612800">- remove -O0 from flags</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.3" date="1774958400">- Related: RHEL-159630 rebuild to build with exception target</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.6" date="1779364800">- CVE-2026-41411 vim: Command injection via backticks in tag files</changelog>
</package>
<package pkgid="a03d8d1eccef010607580d866e06bd74c33785f7ec9e0dfba2d3c4b9e97fcd3c" name="vim-common-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.1" date="1774440000">- RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.2" date="1774612800">- remove -O0 from flags</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.3" date="1774958400">- Related: RHEL-159630 rebuild to build with exception target</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.6" date="1779364800">- CVE-2026-41411 vim: Command injection via backticks in tag files</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.7" date="1779969600">- RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.8" date="1782129600">- RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.9" date="1782907200">- RHEL-186646 CVE-2026-52858 vim: possible code execution with
  python3complete</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.10" date="1782907201">- RHEL-186659 CVE-2026-47162 vim: code injection via
  NetrwBookHistSave()</changelog>
</package>
<package pkgid="9b604f9c3b3a2d6fc60865b1b6cfdf803db709fec5f42c9de31eff18d32dd64c" name="vim-common-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.13"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.6" date="1779364800">- CVE-2026-41411 vim: Command injection via backticks in tag files</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.7" date="1779969600">- RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.8" date="1782129600">- RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.9" date="1782907200">- RHEL-186646 CVE-2026-52858 vim: possible code execution with
  python3complete</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.10" date="1782907201">- RHEL-186659 CVE-2026-47162 vim: code injection via
  NetrwBookHistSave()</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.11" date="1783857600">- RHEL-194062 CVE-2026-55693 vim: out-of-bounds write in
  tree_count_words() and sug_filltree()</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.12" date="1784030400">- RHEL-191367 CVE-2026-57455 vim: Out-of-bounds write with soundfold()
- RHEL-192113 CVE-2026-57456 vim: possible code execution with
  python complete via crafted docstrings</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.13" date="1784721600">- RHEL-203985 CVE-2026-59858 vim: arbitrary Ex command execution
  in C omni-completion
- RHEL-201197 CVE-2026-59856 vim: potential command execution in
  PHP omni-completion</changelog>
</package>
<package pkgid="161dba8e31f5c365860bb0341491f08632a370c23aa0363181fd463047251ff0" name="vim-common-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.6"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-23" date="1758110400">- RHEL-112005 CVE-2025-53905 vim: Vim path traversial
- RHEL-112009 CVE-2025-53906 vim: Vim path traversal</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-24" date="1770033600">- RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-25" date="1770724800">- RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26" date="1773921600">- RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin
- RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.1" date="1774440000">- RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.2" date="1774612800">- remove -O0 from flags</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.3" date="1774958400">- Related: RHEL-159630 rebuild to build with exception target</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.6" date="1779364800">- CVE-2026-41411 vim: Command injection via backticks in tag files</changelog>
</package>
<package pkgid="0ff74f3f95fb187a3b37ae2b82673bb2275656a595dd471672291f2013a40b26" name="vim-debugsource" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.1" date="1774440000">- RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.2" date="1774612800">- remove -O0 from flags</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.3" date="1774958400">- Related: RHEL-159630 rebuild to build with exception target</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.6" date="1779364800">- CVE-2026-41411 vim: Command injection via backticks in tag files</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.7" date="1779969600">- RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.8" date="1782129600">- RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.9" date="1782907200">- RHEL-186646 CVE-2026-52858 vim: possible code execution with
  python3complete</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.10" date="1782907201">- RHEL-186659 CVE-2026-47162 vim: code injection via
  NetrwBookHistSave()</changelog>
</package>
<package pkgid="88518545d4f46748bd42e51fe25cb96652e7f88b113d957e2460ee19dd5ab77a" name="vim-debugsource" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.13"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.6" date="1779364800">- CVE-2026-41411 vim: Command injection via backticks in tag files</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.7" date="1779969600">- RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.8" date="1782129600">- RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.9" date="1782907200">- RHEL-186646 CVE-2026-52858 vim: possible code execution with
  python3complete</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.10" date="1782907201">- RHEL-186659 CVE-2026-47162 vim: code injection via
  NetrwBookHistSave()</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.11" date="1783857600">- RHEL-194062 CVE-2026-55693 vim: out-of-bounds write in
  tree_count_words() and sug_filltree()</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.12" date="1784030400">- RHEL-191367 CVE-2026-57455 vim: Out-of-bounds write with soundfold()
- RHEL-192113 CVE-2026-57456 vim: possible code execution with
  python complete via crafted docstrings</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.13" date="1784721600">- RHEL-203985 CVE-2026-59858 vim: arbitrary Ex command execution
  in C omni-completion
- RHEL-201197 CVE-2026-59856 vim: potential command execution in
  PHP omni-completion</changelog>
</package>
<package pkgid="4b5c123a73440032378b791f738dacafb608fad7bfda511a8c046ad6b20fedf4" name="vim-debugsource" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.6"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-23" date="1758110400">- RHEL-112005 CVE-2025-53905 vim: Vim path traversial
- RHEL-112009 CVE-2025-53906 vim: Vim path traversal</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-24" date="1770033600">- RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-25" date="1770724800">- RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26" date="1773921600">- RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin
- RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.1" date="1774440000">- RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.2" date="1774612800">- remove -O0 from flags</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.3" date="1774958400">- Related: RHEL-159630 rebuild to build with exception target</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.6" date="1779364800">- CVE-2026-41411 vim: Command injection via backticks in tag files</changelog>
</package>
<package pkgid="43c6d15aa8f8a38606aba47bf296aa577558a2309b2a0ddb5f64f4f8400d6a4d" name="vim-enhanced-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.1" date="1774440000">- RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.2" date="1774612800">- remove -O0 from flags</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.3" date="1774958400">- Related: RHEL-159630 rebuild to build with exception target</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.6" date="1779364800">- CVE-2026-41411 vim: Command injection via backticks in tag files</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.7" date="1779969600">- RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.8" date="1782129600">- RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.9" date="1782907200">- RHEL-186646 CVE-2026-52858 vim: possible code execution with
  python3complete</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.10" date="1782907201">- RHEL-186659 CVE-2026-47162 vim: code injection via
  NetrwBookHistSave()</changelog>
</package>
<package pkgid="6bf6e32d3edd6d363d0f20175d66ece6509dff9262721b61aec2c75527e62d5d" name="vim-enhanced-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.13"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.6" date="1779364800">- CVE-2026-41411 vim: Command injection via backticks in tag files</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.7" date="1779969600">- RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.8" date="1782129600">- RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.9" date="1782907200">- RHEL-186646 CVE-2026-52858 vim: possible code execution with
  python3complete</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.10" date="1782907201">- RHEL-186659 CVE-2026-47162 vim: code injection via
  NetrwBookHistSave()</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.11" date="1783857600">- RHEL-194062 CVE-2026-55693 vim: out-of-bounds write in
  tree_count_words() and sug_filltree()</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.12" date="1784030400">- RHEL-191367 CVE-2026-57455 vim: Out-of-bounds write with soundfold()
- RHEL-192113 CVE-2026-57456 vim: possible code execution with
  python complete via crafted docstrings</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.13" date="1784721600">- RHEL-203985 CVE-2026-59858 vim: arbitrary Ex command execution
  in C omni-completion
- RHEL-201197 CVE-2026-59856 vim: potential command execution in
  PHP omni-completion</changelog>
</package>
<package pkgid="85a9496d61a2cdfe9cf6525dc2b1320798d2d73db6b446fb672e6cc2d867abdb" name="vim-enhanced-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.6"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-23" date="1758110400">- RHEL-112005 CVE-2025-53905 vim: Vim path traversial
- RHEL-112009 CVE-2025-53906 vim: Vim path traversal</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-24" date="1770033600">- RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-25" date="1770724800">- RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26" date="1773921600">- RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin
- RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.1" date="1774440000">- RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.2" date="1774612800">- remove -O0 from flags</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.3" date="1774958400">- Related: RHEL-159630 rebuild to build with exception target</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.6" date="1779364800">- CVE-2026-41411 vim: Command injection via backticks in tag files</changelog>
</package>
<package pkgid="66e3f63f31d97bccf790c6db34a5a60612323600c25b5bf58812eb3cefe7ce0e" name="vim-minimal-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.1" date="1774440000">- RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.2" date="1774612800">- remove -O0 from flags</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.3" date="1774958400">- Related: RHEL-159630 rebuild to build with exception target</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.6" date="1779364800">- CVE-2026-41411 vim: Command injection via backticks in tag files</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.7" date="1779969600">- RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.8" date="1782129600">- RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.9" date="1782907200">- RHEL-186646 CVE-2026-52858 vim: possible code execution with
  python3complete</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.10" date="1782907201">- RHEL-186659 CVE-2026-47162 vim: code injection via
  NetrwBookHistSave()</changelog>
</package>
<package pkgid="9c1ec19b477360bbdf2f440c24f152c380d2530b796f45a451e3aa43a496f30b" name="vim-minimal-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.13"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.6" date="1779364800">- CVE-2026-41411 vim: Command injection via backticks in tag files</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.7" date="1779969600">- RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.8" date="1782129600">- RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.9" date="1782907200">- RHEL-186646 CVE-2026-52858 vim: possible code execution with
  python3complete</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.10" date="1782907201">- RHEL-186659 CVE-2026-47162 vim: code injection via
  NetrwBookHistSave()</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.11" date="1783857600">- RHEL-194062 CVE-2026-55693 vim: out-of-bounds write in
  tree_count_words() and sug_filltree()</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.12" date="1784030400">- RHEL-191367 CVE-2026-57455 vim: Out-of-bounds write with soundfold()
- RHEL-192113 CVE-2026-57456 vim: possible code execution with
  python complete via crafted docstrings</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:8.2.2637-26.13" date="1784721600">- RHEL-203985 CVE-2026-59858 vim: arbitrary Ex command execution
  in C omni-completion
- RHEL-201197 CVE-2026-59856 vim: potential command execution in
  PHP omni-completion</changelog>
</package>
<package pkgid="00f789a98939d506f4e1f3669ffb0594305984767dce7a0f6384ba2ab072c1c4" name="vim-minimal-debuginfo" arch="x86_64">
  <version epoch="2" ver="8.2.2637" rel="26.el9_8.6"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-23" date="1758110400">- RHEL-112005 CVE-2025-53905 vim: Vim path traversial
- RHEL-112009 CVE-2025-53906 vim: Vim path traversal</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-24" date="1770033600">- RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-25" date="1770724800">- RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26" date="1773921600">- RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin
- RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.1" date="1774440000">- RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.2" date="1774612800">- remove -O0 from flags</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.3" date="1774958400">- Related: RHEL-159630 rebuild to build with exception target</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.4" date="1775649600">- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.5" date="1779278400">- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite
  via path traversal bypass</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.2.2637-26.6" date="1779364800">- CVE-2026-41411 vim: Command injection via backticks in tag files</changelog>
</package>
<package pkgid="08d475de8b8e8cb0553d14a402b3371b0701d8ed49b65051bf7685d019f0d8cd" name="webkit2gtk3-debuginfo" arch="i686">
  <version epoch="0" ver="2.52.4" rel="1.el9_8"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.1-1" date="1743595200">- Update to 2.48.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.2-1" date="1747224000">- Update to 2.48.2
- Reenable JIT</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.3-1" date="1748606400">- Update to 2.48.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.5-1" date="1754654400">- Update to 2.48.5</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.0-1" date="1758542400">- Update to 2.50.0</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.1-1" date="1760356800">- Update to 2.50.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.3-1" date="1764849600">- Update to 2.50.3</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.50.4-1" date="1766059200">- Update to 2.50.4</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.3-1" date="1776427200">- Update to 2.52.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.4-1" date="1781006400">- Update to 2.52.4</changelog>
</package>
<package pkgid="30b91e72a46ccf63be7446149c91b2b5da621cce5b095e799acbc8d43ef291a6" name="webkit2gtk3-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.52.4" rel="1.el9_8"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.1-1" date="1743595200">- Update to 2.48.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.2-1" date="1747224000">- Update to 2.48.2
- Reenable JIT</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.3-1" date="1748606400">- Update to 2.48.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.5-1" date="1754654400">- Update to 2.48.5</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.0-1" date="1758542400">- Update to 2.50.0</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.1-1" date="1760356800">- Update to 2.50.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.3-1" date="1764849600">- Update to 2.50.3</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.50.4-1" date="1766059200">- Update to 2.50.4</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.3-1" date="1776427200">- Update to 2.52.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.4-1" date="1781006400">- Update to 2.52.4</changelog>
</package>
<package pkgid="071b1184faad15143932445ac12af7e88da132d30fda363eb1ad709a1ca1de92" name="webkit2gtk3-debuginfo" arch="i686">
  <version epoch="0" ver="2.52.5" rel="1.el9_8"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.2-1" date="1747224000">- Update to 2.48.2
- Reenable JIT</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.3-1" date="1748606400">- Update to 2.48.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.5-1" date="1754654400">- Update to 2.48.5</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.0-1" date="1758542400">- Update to 2.50.0</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.1-1" date="1760356800">- Update to 2.50.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.3-1" date="1764849600">- Update to 2.50.3</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.50.4-1" date="1766059200">- Update to 2.50.4</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.3-1" date="1776427200">- Update to 2.52.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.4-1" date="1781006400">- Update to 2.52.4</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.52.5-1" date="1784289600">- Update to 2.52.5</changelog>
</package>
<package pkgid="50e13945d4587d1bebee0644c9d9489978171e652812ad2aac82ea129778c07d" name="webkit2gtk3-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.52.5" rel="1.el9_8"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.2-1" date="1747224000">- Update to 2.48.2
- Reenable JIT</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.3-1" date="1748606400">- Update to 2.48.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.5-1" date="1754654400">- Update to 2.48.5</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.0-1" date="1758542400">- Update to 2.50.0</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.1-1" date="1760356800">- Update to 2.50.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.3-1" date="1764849600">- Update to 2.50.3</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.50.4-1" date="1766059200">- Update to 2.50.4</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.3-1" date="1776427200">- Update to 2.52.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.4-1" date="1781006400">- Update to 2.52.4</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.52.5-1" date="1784289600">- Update to 2.52.5</changelog>
</package>
<package pkgid="961c9c18d4a8b8a50b48cb78ba8e4d2304384a66d47109db899d7a34611f2ed3" name="webkit2gtk3-debugsource" arch="i686">
  <version epoch="0" ver="2.52.4" rel="1.el9_8"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.1-1" date="1743595200">- Update to 2.48.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.2-1" date="1747224000">- Update to 2.48.2
- Reenable JIT</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.3-1" date="1748606400">- Update to 2.48.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.5-1" date="1754654400">- Update to 2.48.5</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.0-1" date="1758542400">- Update to 2.50.0</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.1-1" date="1760356800">- Update to 2.50.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.3-1" date="1764849600">- Update to 2.50.3</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.50.4-1" date="1766059200">- Update to 2.50.4</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.3-1" date="1776427200">- Update to 2.52.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.4-1" date="1781006400">- Update to 2.52.4</changelog>
</package>
<package pkgid="1c96a3f3146a17509fb8bc1f6b0e17cab93cdb4b6c8c691251ae05a02d962f6e" name="webkit2gtk3-debugsource" arch="x86_64">
  <version epoch="0" ver="2.52.4" rel="1.el9_8"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.1-1" date="1743595200">- Update to 2.48.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.2-1" date="1747224000">- Update to 2.48.2
- Reenable JIT</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.3-1" date="1748606400">- Update to 2.48.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.5-1" date="1754654400">- Update to 2.48.5</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.0-1" date="1758542400">- Update to 2.50.0</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.1-1" date="1760356800">- Update to 2.50.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.3-1" date="1764849600">- Update to 2.50.3</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.50.4-1" date="1766059200">- Update to 2.50.4</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.3-1" date="1776427200">- Update to 2.52.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.4-1" date="1781006400">- Update to 2.52.4</changelog>
</package>
<package pkgid="6ae54c5b8c8bb6274c805606845fce20b44e5e52ed757c8fd4c3a30120355b02" name="webkit2gtk3-debugsource" arch="i686">
  <version epoch="0" ver="2.52.5" rel="1.el9_8"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.2-1" date="1747224000">- Update to 2.48.2
- Reenable JIT</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.3-1" date="1748606400">- Update to 2.48.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.5-1" date="1754654400">- Update to 2.48.5</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.0-1" date="1758542400">- Update to 2.50.0</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.1-1" date="1760356800">- Update to 2.50.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.3-1" date="1764849600">- Update to 2.50.3</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.50.4-1" date="1766059200">- Update to 2.50.4</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.3-1" date="1776427200">- Update to 2.52.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.4-1" date="1781006400">- Update to 2.52.4</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.52.5-1" date="1784289600">- Update to 2.52.5</changelog>
</package>
<package pkgid="2601897e9cc62b2338f6e55a06d247da2d85c3ce4647d250d6341249663df4eb" name="webkit2gtk3-debugsource" arch="x86_64">
  <version epoch="0" ver="2.52.5" rel="1.el9_8"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.2-1" date="1747224000">- Update to 2.48.2
- Reenable JIT</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.3-1" date="1748606400">- Update to 2.48.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.5-1" date="1754654400">- Update to 2.48.5</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.0-1" date="1758542400">- Update to 2.50.0</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.1-1" date="1760356800">- Update to 2.50.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.3-1" date="1764849600">- Update to 2.50.3</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.50.4-1" date="1766059200">- Update to 2.50.4</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.3-1" date="1776427200">- Update to 2.52.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.4-1" date="1781006400">- Update to 2.52.4</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.52.5-1" date="1784289600">- Update to 2.52.5</changelog>
</package>
<package pkgid="865bee3d3c25c38782ac1aeb4e831e26e1e776600406c08138a4d84065a73078" name="webkit2gtk3-devel-debuginfo" arch="i686">
  <version epoch="0" ver="2.52.4" rel="1.el9_8"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.1-1" date="1743595200">- Update to 2.48.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.2-1" date="1747224000">- Update to 2.48.2
- Reenable JIT</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.3-1" date="1748606400">- Update to 2.48.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.5-1" date="1754654400">- Update to 2.48.5</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.0-1" date="1758542400">- Update to 2.50.0</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.1-1" date="1760356800">- Update to 2.50.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.3-1" date="1764849600">- Update to 2.50.3</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.50.4-1" date="1766059200">- Update to 2.50.4</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.3-1" date="1776427200">- Update to 2.52.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.4-1" date="1781006400">- Update to 2.52.4</changelog>
</package>
<package pkgid="4f29363e89dc149c244d03596661875c6c0e51a4b88830aca6b66e8e18ae1964" name="webkit2gtk3-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.52.4" rel="1.el9_8"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.1-1" date="1743595200">- Update to 2.48.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.2-1" date="1747224000">- Update to 2.48.2
- Reenable JIT</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.3-1" date="1748606400">- Update to 2.48.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.5-1" date="1754654400">- Update to 2.48.5</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.0-1" date="1758542400">- Update to 2.50.0</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.1-1" date="1760356800">- Update to 2.50.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.3-1" date="1764849600">- Update to 2.50.3</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.50.4-1" date="1766059200">- Update to 2.50.4</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.3-1" date="1776427200">- Update to 2.52.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.4-1" date="1781006400">- Update to 2.52.4</changelog>
</package>
<package pkgid="e77285105c242d0beb6336269db0cc03f693fdae207b55dc4731dad423564f6c" name="webkit2gtk3-devel-debuginfo" arch="i686">
  <version epoch="0" ver="2.52.5" rel="1.el9_8"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.2-1" date="1747224000">- Update to 2.48.2
- Reenable JIT</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.3-1" date="1748606400">- Update to 2.48.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.5-1" date="1754654400">- Update to 2.48.5</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.0-1" date="1758542400">- Update to 2.50.0</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.1-1" date="1760356800">- Update to 2.50.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.3-1" date="1764849600">- Update to 2.50.3</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.50.4-1" date="1766059200">- Update to 2.50.4</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.3-1" date="1776427200">- Update to 2.52.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.4-1" date="1781006400">- Update to 2.52.4</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.52.5-1" date="1784289600">- Update to 2.52.5</changelog>
</package>
<package pkgid="47621f625852b6bc1484e4aa0e7ade4ce70fc69c155ba1211660626c61eeeb36" name="webkit2gtk3-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.52.5" rel="1.el9_8"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.2-1" date="1747224000">- Update to 2.48.2
- Reenable JIT</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.3-1" date="1748606400">- Update to 2.48.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.5-1" date="1754654400">- Update to 2.48.5</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.0-1" date="1758542400">- Update to 2.50.0</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.1-1" date="1760356800">- Update to 2.50.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.3-1" date="1764849600">- Update to 2.50.3</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.50.4-1" date="1766059200">- Update to 2.50.4</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.3-1" date="1776427200">- Update to 2.52.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.4-1" date="1781006400">- Update to 2.52.4</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.52.5-1" date="1784289600">- Update to 2.52.5</changelog>
</package>
<package pkgid="cc7a63fe3a7343435c5352c7c31b2700b16d452d85ca14f1d7ac75cec658ec8b" name="webkit2gtk3-jsc-debuginfo" arch="i686">
  <version epoch="0" ver="2.52.4" rel="1.el9_8"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.1-1" date="1743595200">- Update to 2.48.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.2-1" date="1747224000">- Update to 2.48.2
- Reenable JIT</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.3-1" date="1748606400">- Update to 2.48.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.5-1" date="1754654400">- Update to 2.48.5</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.0-1" date="1758542400">- Update to 2.50.0</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.1-1" date="1760356800">- Update to 2.50.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.3-1" date="1764849600">- Update to 2.50.3</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.50.4-1" date="1766059200">- Update to 2.50.4</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.3-1" date="1776427200">- Update to 2.52.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.4-1" date="1781006400">- Update to 2.52.4</changelog>
</package>
<package pkgid="dd140daa9a5f46a4d84e9ab6f2b72d3f54c58fcc44b76ea8088bcbe0430850ba" name="webkit2gtk3-jsc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.52.4" rel="1.el9_8"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.1-1" date="1743595200">- Update to 2.48.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.2-1" date="1747224000">- Update to 2.48.2
- Reenable JIT</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.3-1" date="1748606400">- Update to 2.48.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.5-1" date="1754654400">- Update to 2.48.5</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.0-1" date="1758542400">- Update to 2.50.0</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.1-1" date="1760356800">- Update to 2.50.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.3-1" date="1764849600">- Update to 2.50.3</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.50.4-1" date="1766059200">- Update to 2.50.4</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.3-1" date="1776427200">- Update to 2.52.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.4-1" date="1781006400">- Update to 2.52.4</changelog>
</package>
<package pkgid="08b3e030d88c7803d134708bbc34528f18339da2632af390996e3544cf27647f" name="webkit2gtk3-jsc-debuginfo" arch="i686">
  <version epoch="0" ver="2.52.5" rel="1.el9_8"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.2-1" date="1747224000">- Update to 2.48.2
- Reenable JIT</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.3-1" date="1748606400">- Update to 2.48.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.5-1" date="1754654400">- Update to 2.48.5</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.0-1" date="1758542400">- Update to 2.50.0</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.1-1" date="1760356800">- Update to 2.50.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.3-1" date="1764849600">- Update to 2.50.3</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.50.4-1" date="1766059200">- Update to 2.50.4</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.3-1" date="1776427200">- Update to 2.52.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.4-1" date="1781006400">- Update to 2.52.4</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.52.5-1" date="1784289600">- Update to 2.52.5</changelog>
</package>
<package pkgid="d442ee5e57e8756f8eeffa0b278ed312c60d54e8c5f8d6ba406624777fd06259" name="webkit2gtk3-jsc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.52.5" rel="1.el9_8"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.2-1" date="1747224000">- Update to 2.48.2
- Reenable JIT</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.3-1" date="1748606400">- Update to 2.48.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.5-1" date="1754654400">- Update to 2.48.5</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.0-1" date="1758542400">- Update to 2.50.0</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.1-1" date="1760356800">- Update to 2.50.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.3-1" date="1764849600">- Update to 2.50.3</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.50.4-1" date="1766059200">- Update to 2.50.4</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.3-1" date="1776427200">- Update to 2.52.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.4-1" date="1781006400">- Update to 2.52.4</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.52.5-1" date="1784289600">- Update to 2.52.5</changelog>
</package>
<package pkgid="27861f54e5689ad748a361dc7d760d390581b27a629d4a54a35c5256411179a4" name="webkit2gtk3-jsc-devel-debuginfo" arch="i686">
  <version epoch="0" ver="2.52.4" rel="1.el9_8"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.1-1" date="1743595200">- Update to 2.48.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.2-1" date="1747224000">- Update to 2.48.2
- Reenable JIT</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.3-1" date="1748606400">- Update to 2.48.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.5-1" date="1754654400">- Update to 2.48.5</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.0-1" date="1758542400">- Update to 2.50.0</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.1-1" date="1760356800">- Update to 2.50.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.3-1" date="1764849600">- Update to 2.50.3</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.50.4-1" date="1766059200">- Update to 2.50.4</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.3-1" date="1776427200">- Update to 2.52.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.4-1" date="1781006400">- Update to 2.52.4</changelog>
</package>
<package pkgid="bdd234ab7be486d063737cfa4c061a1fa45e9d523c1ad38f81c49f847e2ef0fe" name="webkit2gtk3-jsc-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.52.4" rel="1.el9_8"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.1-1" date="1743595200">- Update to 2.48.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.2-1" date="1747224000">- Update to 2.48.2
- Reenable JIT</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.3-1" date="1748606400">- Update to 2.48.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.5-1" date="1754654400">- Update to 2.48.5</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.0-1" date="1758542400">- Update to 2.50.0</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.1-1" date="1760356800">- Update to 2.50.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.3-1" date="1764849600">- Update to 2.50.3</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.50.4-1" date="1766059200">- Update to 2.50.4</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.3-1" date="1776427200">- Update to 2.52.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.4-1" date="1781006400">- Update to 2.52.4</changelog>
</package>
<package pkgid="4e28bb5ab3eb0362b61bcfe27046d2c254acdc60ed75c64f36ede9c43befb40a" name="webkit2gtk3-jsc-devel-debuginfo" arch="i686">
  <version epoch="0" ver="2.52.5" rel="1.el9_8"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.2-1" date="1747224000">- Update to 2.48.2
- Reenable JIT</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.3-1" date="1748606400">- Update to 2.48.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.5-1" date="1754654400">- Update to 2.48.5</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.0-1" date="1758542400">- Update to 2.50.0</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.1-1" date="1760356800">- Update to 2.50.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.3-1" date="1764849600">- Update to 2.50.3</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.50.4-1" date="1766059200">- Update to 2.50.4</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.3-1" date="1776427200">- Update to 2.52.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.4-1" date="1781006400">- Update to 2.52.4</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.52.5-1" date="1784289600">- Update to 2.52.5</changelog>
</package>
<package pkgid="2ec79433732ecadb728cc4a3711e90001e18596673e8c34db0d7eef6f23f4eca" name="webkit2gtk3-jsc-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.52.5" rel="1.el9_8"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.2-1" date="1747224000">- Update to 2.48.2
- Reenable JIT</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.3-1" date="1748606400">- Update to 2.48.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.48.5-1" date="1754654400">- Update to 2.48.5</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.0-1" date="1758542400">- Update to 2.50.0</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.1-1" date="1760356800">- Update to 2.50.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.50.3-1" date="1764849600">- Update to 2.50.3</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.50.4-1" date="1766059200">- Update to 2.50.4</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.3-1" date="1776427200">- Update to 2.52.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.52.4-1" date="1781006400">- Update to 2.52.4</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.52.5-1" date="1784289600">- Update to 2.52.5</changelog>
</package>
<package pkgid="fba3d1f24fc55932dc477b4acc199f4d8f5d880352faa17cfc761e200baa4241" name="xorg-x11-drv-wacom-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="5.el9_8"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.0.0-2" date="1753790400">- Add support for Wacom Intuos Pro 3rd Gen (RHEL-106467)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.0.0-3" date="1754395200">- Map ABS_THROTTLE to ring2 on all dualring devices (RHEL-106467)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.0.0-4" date="1755777600">- Fix axis inversion on the first relative dial  (RHEL-106467)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.0.0-5" date="1772539200">- Emulate a zero axis events after REL_WHEEL (RHEL-153540)
- Fix ToolSerials assignment for serials greater than INT_MAX (RHEL-153532)</changelog>
</package>
<package pkgid="622cca2d9e237b10f07499738107c71a46c44ef3e9d8ea9fb252714f32f9e4bd" name="xorg-x11-drv-wacom-debugsource" arch="i686">
  <version epoch="0" ver="1.0.0" rel="5.el9_8"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.0.0-2" date="1753790400">- Add support for Wacom Intuos Pro 3rd Gen (RHEL-106467)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.0.0-3" date="1754395200">- Map ABS_THROTTLE to ring2 on all dualring devices (RHEL-106467)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.0.0-4" date="1755777600">- Fix axis inversion on the first relative dial  (RHEL-106467)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.0.0-5" date="1772539200">- Emulate a zero axis events after REL_WHEEL (RHEL-153540)
- Fix ToolSerials assignment for serials greater than INT_MAX (RHEL-153532)</changelog>
</package>
<package pkgid="1a2e44096179870e940899d974be6e26caec369a65704b135147eb2e03a0a290" name="xorg-x11-drv-wacom-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="5.el9_8"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.0.0-2" date="1753790400">- Add support for Wacom Intuos Pro 3rd Gen (RHEL-106467)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.0.0-3" date="1754395200">- Map ABS_THROTTLE to ring2 on all dualring devices (RHEL-106467)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.0.0-4" date="1755777600">- Fix axis inversion on the first relative dial  (RHEL-106467)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.0.0-5" date="1772539200">- Emulate a zero axis events after REL_WHEEL (RHEL-153540)
- Fix ToolSerials assignment for serials greater than INT_MAX (RHEL-153532)</changelog>
</package>
<package pkgid="c4e0c91255226c44df465fe1648c0b57c58d717a38b1e3d555144d78ecc3caa5" name="xorg-x11-drv-wacom-devel-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.0" rel="5.el9_8"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.0.0-2" date="1753790400">- Add support for Wacom Intuos Pro 3rd Gen (RHEL-106467)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.0.0-3" date="1754395200">- Map ABS_THROTTLE to ring2 on all dualring devices (RHEL-106467)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.0.0-4" date="1755777600">- Fix axis inversion on the first relative dial  (RHEL-106467)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.0.0-5" date="1772539200">- Emulate a zero axis events after REL_WHEEL (RHEL-153540)
- Fix ToolSerials assignment for serials greater than INT_MAX (RHEL-153532)</changelog>
</package>
<package pkgid="6f01a1068ce0b02eff50f99386a98e46fa9d0dabe4b08754f1666177cd603d79" name="xorg-x11-drv-wacom-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="5.el9_8"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.0.0-2" date="1753790400">- Add support for Wacom Intuos Pro 3rd Gen (RHEL-106467)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.0.0-3" date="1754395200">- Map ABS_THROTTLE to ring2 on all dualring devices (RHEL-106467)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.0.0-4" date="1755777600">- Fix axis inversion on the first relative dial  (RHEL-106467)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.0.0-5" date="1772539200">- Emulate a zero axis events after REL_WHEEL (RHEL-153540)
- Fix ToolSerials assignment for serials greater than INT_MAX (RHEL-153532)</changelog>
</package>
<package pkgid="b4b6175d4f48b80bd207fc9d5b8d6a09bc4a3f040d8c5b5fae9eaa24a54e3a7e" name="xorg-x11-drv-wacom-serial-support-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="5.el9_8"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.0.0-2" date="1753790400">- Add support for Wacom Intuos Pro 3rd Gen (RHEL-106467)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.0.0-3" date="1754395200">- Map ABS_THROTTLE to ring2 on all dualring devices (RHEL-106467)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.0.0-4" date="1755777600">- Fix axis inversion on the first relative dial  (RHEL-106467)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.0.0-5" date="1772539200">- Emulate a zero axis events after REL_WHEEL (RHEL-153540)
- Fix ToolSerials assignment for serials greater than INT_MAX (RHEL-153532)</changelog>
</package>
<package pkgid="25bf72efcff5685e455af27328542aa481145258a2d23c898f732d95ae9a777c" name="xorg-x11-server-Xdmx-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.20.11" rel="34.el9_8.2"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.11-27" date="1730203200">- CVE fix for CVE-2024-9632
- Backport fix for invalid Unicode sequence</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-28" date="1740571200">- CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186),
               CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191),
               CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199),
               CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-29" date="1742558400">- Fix LEDs state after suspend/resume
  Resolves: https://issues.redhat.com/browse/RHEL-82085</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-30" date="1745323200">- xfree86: Fix potentially NULL reference to platform device's PCI device
  Resolves: https://issues.redhat.com/browse/RHEL-84253</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-31" date="1750248000">- CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308),
               CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409),
               CVE-2025-49180 (RHEL-97253)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-32" date="1761825600">- CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035),
               CVE-2025-62231 (RHEL-125003)</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-33" date="1768392000">- Rebuild against xorg-x11-xtrans-devel 1.4.0-9
  Resolves: RHEL-117509</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34" date="1776168000">- CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
               CVE-2026-34002, CVE-2026-34003
  Resolves: https://redhat.atlassian.net/browse/RHEL-163226
  Resolves: https://redhat.atlassian.net/browse/RHEL-163308
  Resolves: https://redhat.atlassian.net/browse/RHEL-163239</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.1" date="1781092800">- CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
               CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
               CVE-2026-50262, CVE-2026-50263, CVE-2026-50264
  Resolves: https://redhat.atlassian.net/browse/RHEL-182435</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.2" date="1781265600">- Other security related fixes
  Resolves: https://redhat.atlassian.net/browse/RHEL-184288</changelog>
</package>
<package pkgid="f4ab114d8b587cf4a440da68aa606c6b320b786f005ff7f1db36b531952b1549" name="xorg-x11-server-Xdmx-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.20.11" rel="34.el9_8.3"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-28" date="1740571200">- CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186),
               CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191),
               CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199),
               CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-29" date="1742558400">- Fix LEDs state after suspend/resume
  Resolves: https://issues.redhat.com/browse/RHEL-82085</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-30" date="1745323200">- xfree86: Fix potentially NULL reference to platform device's PCI device
  Resolves: https://issues.redhat.com/browse/RHEL-84253</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-31" date="1750248000">- CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308),
               CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409),
               CVE-2025-49180 (RHEL-97253)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-32" date="1761825600">- CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035),
               CVE-2025-62231 (RHEL-125003)</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-33" date="1768392000">- Rebuild against xorg-x11-xtrans-devel 1.4.0-9
  Resolves: RHEL-117509</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34" date="1776168000">- CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
               CVE-2026-34002, CVE-2026-34003
  Resolves: https://redhat.atlassian.net/browse/RHEL-163226
  Resolves: https://redhat.atlassian.net/browse/RHEL-163308
  Resolves: https://redhat.atlassian.net/browse/RHEL-163239</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.1" date="1781092800">- CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
               CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
               CVE-2026-50262, CVE-2026-50263, CVE-2026-50264
  Resolves: https://redhat.atlassian.net/browse/RHEL-182435</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.2" date="1781265600">- Other security related fixes
  Resolves: https://redhat.atlassian.net/browse/RHEL-184288</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-34.3" date="1783684800">- CVE fix for CVE-2026-55999
  Resolves: https://redhat.atlassian.net/browse/RHEL-191493</changelog>
</package>
<package pkgid="4e0ad06639cc45b685151fced7db110c32d4d8cba4db56a630cc6a7bdeb33580" name="xorg-x11-server-Xephyr-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.20.11" rel="34.el9_8.2"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.11-27" date="1730203200">- CVE fix for CVE-2024-9632
- Backport fix for invalid Unicode sequence</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-28" date="1740571200">- CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186),
               CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191),
               CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199),
               CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-29" date="1742558400">- Fix LEDs state after suspend/resume
  Resolves: https://issues.redhat.com/browse/RHEL-82085</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-30" date="1745323200">- xfree86: Fix potentially NULL reference to platform device's PCI device
  Resolves: https://issues.redhat.com/browse/RHEL-84253</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-31" date="1750248000">- CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308),
               CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409),
               CVE-2025-49180 (RHEL-97253)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-32" date="1761825600">- CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035),
               CVE-2025-62231 (RHEL-125003)</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-33" date="1768392000">- Rebuild against xorg-x11-xtrans-devel 1.4.0-9
  Resolves: RHEL-117509</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34" date="1776168000">- CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
               CVE-2026-34002, CVE-2026-34003
  Resolves: https://redhat.atlassian.net/browse/RHEL-163226
  Resolves: https://redhat.atlassian.net/browse/RHEL-163308
  Resolves: https://redhat.atlassian.net/browse/RHEL-163239</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.1" date="1781092800">- CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
               CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
               CVE-2026-50262, CVE-2026-50263, CVE-2026-50264
  Resolves: https://redhat.atlassian.net/browse/RHEL-182435</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.2" date="1781265600">- Other security related fixes
  Resolves: https://redhat.atlassian.net/browse/RHEL-184288</changelog>
</package>
<package pkgid="0ba21f5b9d64037f4b169edfeea427ee14246e8bb35d13701b96f7c7c8b0328b" name="xorg-x11-server-Xephyr-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.20.11" rel="34.el9_8.3"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-28" date="1740571200">- CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186),
               CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191),
               CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199),
               CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-29" date="1742558400">- Fix LEDs state after suspend/resume
  Resolves: https://issues.redhat.com/browse/RHEL-82085</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-30" date="1745323200">- xfree86: Fix potentially NULL reference to platform device's PCI device
  Resolves: https://issues.redhat.com/browse/RHEL-84253</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-31" date="1750248000">- CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308),
               CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409),
               CVE-2025-49180 (RHEL-97253)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-32" date="1761825600">- CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035),
               CVE-2025-62231 (RHEL-125003)</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-33" date="1768392000">- Rebuild against xorg-x11-xtrans-devel 1.4.0-9
  Resolves: RHEL-117509</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34" date="1776168000">- CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
               CVE-2026-34002, CVE-2026-34003
  Resolves: https://redhat.atlassian.net/browse/RHEL-163226
  Resolves: https://redhat.atlassian.net/browse/RHEL-163308
  Resolves: https://redhat.atlassian.net/browse/RHEL-163239</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.1" date="1781092800">- CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
               CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
               CVE-2026-50262, CVE-2026-50263, CVE-2026-50264
  Resolves: https://redhat.atlassian.net/browse/RHEL-182435</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.2" date="1781265600">- Other security related fixes
  Resolves: https://redhat.atlassian.net/browse/RHEL-184288</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-34.3" date="1783684800">- CVE fix for CVE-2026-55999
  Resolves: https://redhat.atlassian.net/browse/RHEL-191493</changelog>
</package>
<package pkgid="eb6fb6e53d776d60c84d54703405fdb932a94a4261ec1d15dd5f8e3a6bf766a2" name="xorg-x11-server-Xnest-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.20.11" rel="34.el9_8.2"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.11-27" date="1730203200">- CVE fix for CVE-2024-9632
- Backport fix for invalid Unicode sequence</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-28" date="1740571200">- CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186),
               CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191),
               CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199),
               CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-29" date="1742558400">- Fix LEDs state after suspend/resume
  Resolves: https://issues.redhat.com/browse/RHEL-82085</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-30" date="1745323200">- xfree86: Fix potentially NULL reference to platform device's PCI device
  Resolves: https://issues.redhat.com/browse/RHEL-84253</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-31" date="1750248000">- CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308),
               CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409),
               CVE-2025-49180 (RHEL-97253)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-32" date="1761825600">- CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035),
               CVE-2025-62231 (RHEL-125003)</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-33" date="1768392000">- Rebuild against xorg-x11-xtrans-devel 1.4.0-9
  Resolves: RHEL-117509</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34" date="1776168000">- CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
               CVE-2026-34002, CVE-2026-34003
  Resolves: https://redhat.atlassian.net/browse/RHEL-163226
  Resolves: https://redhat.atlassian.net/browse/RHEL-163308
  Resolves: https://redhat.atlassian.net/browse/RHEL-163239</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.1" date="1781092800">- CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
               CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
               CVE-2026-50262, CVE-2026-50263, CVE-2026-50264
  Resolves: https://redhat.atlassian.net/browse/RHEL-182435</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.2" date="1781265600">- Other security related fixes
  Resolves: https://redhat.atlassian.net/browse/RHEL-184288</changelog>
</package>
<package pkgid="ffa0f5b4f80cf7c9a24f03828e4696a835071d6099dc713f5b8a67fd86e2a95c" name="xorg-x11-server-Xnest-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.20.11" rel="34.el9_8.3"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-28" date="1740571200">- CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186),
               CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191),
               CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199),
               CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-29" date="1742558400">- Fix LEDs state after suspend/resume
  Resolves: https://issues.redhat.com/browse/RHEL-82085</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-30" date="1745323200">- xfree86: Fix potentially NULL reference to platform device's PCI device
  Resolves: https://issues.redhat.com/browse/RHEL-84253</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-31" date="1750248000">- CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308),
               CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409),
               CVE-2025-49180 (RHEL-97253)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-32" date="1761825600">- CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035),
               CVE-2025-62231 (RHEL-125003)</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-33" date="1768392000">- Rebuild against xorg-x11-xtrans-devel 1.4.0-9
  Resolves: RHEL-117509</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34" date="1776168000">- CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
               CVE-2026-34002, CVE-2026-34003
  Resolves: https://redhat.atlassian.net/browse/RHEL-163226
  Resolves: https://redhat.atlassian.net/browse/RHEL-163308
  Resolves: https://redhat.atlassian.net/browse/RHEL-163239</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.1" date="1781092800">- CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
               CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
               CVE-2026-50262, CVE-2026-50263, CVE-2026-50264
  Resolves: https://redhat.atlassian.net/browse/RHEL-182435</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.2" date="1781265600">- Other security related fixes
  Resolves: https://redhat.atlassian.net/browse/RHEL-184288</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-34.3" date="1783684800">- CVE fix for CVE-2026-55999
  Resolves: https://redhat.atlassian.net/browse/RHEL-191493</changelog>
</package>
<package pkgid="5161851c7c8ebb599b165d16aabafaa9795db99283c12ddaa8c293338dc0b2d5" name="xorg-x11-server-Xorg-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.20.11" rel="34.el9_8.2"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.11-27" date="1730203200">- CVE fix for CVE-2024-9632
- Backport fix for invalid Unicode sequence</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-28" date="1740571200">- CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186),
               CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191),
               CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199),
               CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-29" date="1742558400">- Fix LEDs state after suspend/resume
  Resolves: https://issues.redhat.com/browse/RHEL-82085</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-30" date="1745323200">- xfree86: Fix potentially NULL reference to platform device's PCI device
  Resolves: https://issues.redhat.com/browse/RHEL-84253</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-31" date="1750248000">- CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308),
               CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409),
               CVE-2025-49180 (RHEL-97253)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-32" date="1761825600">- CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035),
               CVE-2025-62231 (RHEL-125003)</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-33" date="1768392000">- Rebuild against xorg-x11-xtrans-devel 1.4.0-9
  Resolves: RHEL-117509</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34" date="1776168000">- CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
               CVE-2026-34002, CVE-2026-34003
  Resolves: https://redhat.atlassian.net/browse/RHEL-163226
  Resolves: https://redhat.atlassian.net/browse/RHEL-163308
  Resolves: https://redhat.atlassian.net/browse/RHEL-163239</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.1" date="1781092800">- CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
               CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
               CVE-2026-50262, CVE-2026-50263, CVE-2026-50264
  Resolves: https://redhat.atlassian.net/browse/RHEL-182435</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.2" date="1781265600">- Other security related fixes
  Resolves: https://redhat.atlassian.net/browse/RHEL-184288</changelog>
</package>
<package pkgid="02c90f6205b95cce7fbfa342b5c1ef399212fd3a4ab28179cb7649047a77def4" name="xorg-x11-server-Xorg-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.20.11" rel="34.el9_8.3"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-28" date="1740571200">- CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186),
               CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191),
               CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199),
               CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-29" date="1742558400">- Fix LEDs state after suspend/resume
  Resolves: https://issues.redhat.com/browse/RHEL-82085</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-30" date="1745323200">- xfree86: Fix potentially NULL reference to platform device's PCI device
  Resolves: https://issues.redhat.com/browse/RHEL-84253</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-31" date="1750248000">- CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308),
               CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409),
               CVE-2025-49180 (RHEL-97253)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-32" date="1761825600">- CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035),
               CVE-2025-62231 (RHEL-125003)</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-33" date="1768392000">- Rebuild against xorg-x11-xtrans-devel 1.4.0-9
  Resolves: RHEL-117509</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34" date="1776168000">- CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
               CVE-2026-34002, CVE-2026-34003
  Resolves: https://redhat.atlassian.net/browse/RHEL-163226
  Resolves: https://redhat.atlassian.net/browse/RHEL-163308
  Resolves: https://redhat.atlassian.net/browse/RHEL-163239</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.1" date="1781092800">- CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
               CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
               CVE-2026-50262, CVE-2026-50263, CVE-2026-50264
  Resolves: https://redhat.atlassian.net/browse/RHEL-182435</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.2" date="1781265600">- Other security related fixes
  Resolves: https://redhat.atlassian.net/browse/RHEL-184288</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-34.3" date="1783684800">- CVE fix for CVE-2026-55999
  Resolves: https://redhat.atlassian.net/browse/RHEL-191493</changelog>
</package>
<package pkgid="8017ab90b1f50c3e2e2e4c0701304be7db4a18f0b18089f15a60a5a576fad697" name="xorg-x11-server-Xvfb-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.20.11" rel="34.el9_8.2"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.11-27" date="1730203200">- CVE fix for CVE-2024-9632
- Backport fix for invalid Unicode sequence</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-28" date="1740571200">- CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186),
               CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191),
               CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199),
               CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-29" date="1742558400">- Fix LEDs state after suspend/resume
  Resolves: https://issues.redhat.com/browse/RHEL-82085</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-30" date="1745323200">- xfree86: Fix potentially NULL reference to platform device's PCI device
  Resolves: https://issues.redhat.com/browse/RHEL-84253</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-31" date="1750248000">- CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308),
               CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409),
               CVE-2025-49180 (RHEL-97253)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-32" date="1761825600">- CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035),
               CVE-2025-62231 (RHEL-125003)</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-33" date="1768392000">- Rebuild against xorg-x11-xtrans-devel 1.4.0-9
  Resolves: RHEL-117509</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34" date="1776168000">- CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
               CVE-2026-34002, CVE-2026-34003
  Resolves: https://redhat.atlassian.net/browse/RHEL-163226
  Resolves: https://redhat.atlassian.net/browse/RHEL-163308
  Resolves: https://redhat.atlassian.net/browse/RHEL-163239</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.1" date="1781092800">- CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
               CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
               CVE-2026-50262, CVE-2026-50263, CVE-2026-50264
  Resolves: https://redhat.atlassian.net/browse/RHEL-182435</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.2" date="1781265600">- Other security related fixes
  Resolves: https://redhat.atlassian.net/browse/RHEL-184288</changelog>
</package>
<package pkgid="69f91c24fe201cb7411f4e3c87b00bb425873774f816702999f4b81542241c3f" name="xorg-x11-server-Xvfb-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.20.11" rel="34.el9_8.3"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-28" date="1740571200">- CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186),
               CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191),
               CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199),
               CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-29" date="1742558400">- Fix LEDs state after suspend/resume
  Resolves: https://issues.redhat.com/browse/RHEL-82085</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-30" date="1745323200">- xfree86: Fix potentially NULL reference to platform device's PCI device
  Resolves: https://issues.redhat.com/browse/RHEL-84253</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-31" date="1750248000">- CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308),
               CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409),
               CVE-2025-49180 (RHEL-97253)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-32" date="1761825600">- CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035),
               CVE-2025-62231 (RHEL-125003)</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-33" date="1768392000">- Rebuild against xorg-x11-xtrans-devel 1.4.0-9
  Resolves: RHEL-117509</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34" date="1776168000">- CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
               CVE-2026-34002, CVE-2026-34003
  Resolves: https://redhat.atlassian.net/browse/RHEL-163226
  Resolves: https://redhat.atlassian.net/browse/RHEL-163308
  Resolves: https://redhat.atlassian.net/browse/RHEL-163239</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.1" date="1781092800">- CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
               CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
               CVE-2026-50262, CVE-2026-50263, CVE-2026-50264
  Resolves: https://redhat.atlassian.net/browse/RHEL-182435</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.2" date="1781265600">- Other security related fixes
  Resolves: https://redhat.atlassian.net/browse/RHEL-184288</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-34.3" date="1783684800">- CVE fix for CVE-2026-55999
  Resolves: https://redhat.atlassian.net/browse/RHEL-191493</changelog>
</package>
<package pkgid="f6336b364052651e8ce5770dea67ef90599f7b8668d88264664d4722f43c6628" name="xorg-x11-server-Xwayland-debuginfo" arch="i686">
  <version epoch="0" ver="24.1.9" rel="4.el9_8.2"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-2" date="1730289600">- Fix for CVE-2024-9632 - (RHEL-61997)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-3" date="1740571200">- CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187),
               CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193),
               CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202),
               CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-4" date="1750248000">- CVE fix for: CVE-2025-49175 (RHEL-97288), CVE-2025-49176 (RHEL-97334),
               CVE-2025-49177 (RHEL-97357), CVE-2025-49178 (RHEL-97393),
               CVE-2025-49179 (RHEL-97404), CVE-2025-49180 (RHEL-97244)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-5" date="1761825600">- CVE fix for: CVE-2025-62229 (RHEL-119977), CVE-2025-62230 (RHEL-120023),
               CVE-2025-62231 (RHEL-125018)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-1" date="1763640000">- Rebase to Xwayland 24.1.9 (RHEL-129828)</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 24.1.9-2" date="1768305600">- Rebuild against xorg-x11-xtrans-devel 1.4.0-9
  Resolves: RHEL-117510</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-3" date="1776772800">- Fix a regression in Xwayland 24.1.9 with XTS test Xlib10
  Resolves: https://redhat.atlassian.net/browse/RHEL-170368</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4" date="1776859200">- CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
               CVE-2026-34002, CVE-2026-34003
  Resolves: https://redhat.atlassian.net/browse/RHEL-163199
  Resolves: https://redhat.atlassian.net/browse/RHEL-163295
  Resolves: https://redhat.atlassian.net/browse/RHEL-163253</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4.1" date="1781092800">- CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
               CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
               CVE-2026-50262, CVE-2026-50263
  Resolves: https://redhat.atlassian.net/browse/RHEL-182426</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4.2" date="1781265600">- Other security related fixes
  Resolves: https://redhat.atlassian.net/browse/RHEL-184292</changelog>
</package>
<package pkgid="67d94f79861839f0630a89bd8f7c7fe8110f4a14ea24259493bf705c83dff28b" name="xorg-x11-server-Xwayland-debuginfo" arch="x86_64">
  <version epoch="0" ver="24.1.9" rel="4.el9_8.2"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-2" date="1730289600">- Fix for CVE-2024-9632 - (RHEL-61997)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-3" date="1740571200">- CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187),
               CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193),
               CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202),
               CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-4" date="1750248000">- CVE fix for: CVE-2025-49175 (RHEL-97288), CVE-2025-49176 (RHEL-97334),
               CVE-2025-49177 (RHEL-97357), CVE-2025-49178 (RHEL-97393),
               CVE-2025-49179 (RHEL-97404), CVE-2025-49180 (RHEL-97244)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-5" date="1761825600">- CVE fix for: CVE-2025-62229 (RHEL-119977), CVE-2025-62230 (RHEL-120023),
               CVE-2025-62231 (RHEL-125018)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-1" date="1763640000">- Rebase to Xwayland 24.1.9 (RHEL-129828)</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 24.1.9-2" date="1768305600">- Rebuild against xorg-x11-xtrans-devel 1.4.0-9
  Resolves: RHEL-117510</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-3" date="1776772800">- Fix a regression in Xwayland 24.1.9 with XTS test Xlib10
  Resolves: https://redhat.atlassian.net/browse/RHEL-170368</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4" date="1776859200">- CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
               CVE-2026-34002, CVE-2026-34003
  Resolves: https://redhat.atlassian.net/browse/RHEL-163199
  Resolves: https://redhat.atlassian.net/browse/RHEL-163295
  Resolves: https://redhat.atlassian.net/browse/RHEL-163253</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4.1" date="1781092800">- CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
               CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
               CVE-2026-50262, CVE-2026-50263
  Resolves: https://redhat.atlassian.net/browse/RHEL-182426</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4.2" date="1781265600">- Other security related fixes
  Resolves: https://redhat.atlassian.net/browse/RHEL-184292</changelog>
</package>
<package pkgid="db0bcb99561cff344b527efe91187068e47855ef3124b9be1b237f00dc9934af" name="xorg-x11-server-Xwayland-debuginfo" arch="i686">
  <version epoch="0" ver="24.1.9" rel="4.el9_8.3"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-3" date="1740571200">- CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187),
               CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193),
               CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202),
               CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-4" date="1750248000">- CVE fix for: CVE-2025-49175 (RHEL-97288), CVE-2025-49176 (RHEL-97334),
               CVE-2025-49177 (RHEL-97357), CVE-2025-49178 (RHEL-97393),
               CVE-2025-49179 (RHEL-97404), CVE-2025-49180 (RHEL-97244)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-5" date="1761825600">- CVE fix for: CVE-2025-62229 (RHEL-119977), CVE-2025-62230 (RHEL-120023),
               CVE-2025-62231 (RHEL-125018)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-1" date="1763640000">- Rebase to Xwayland 24.1.9 (RHEL-129828)</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 24.1.9-2" date="1768305600">- Rebuild against xorg-x11-xtrans-devel 1.4.0-9
  Resolves: RHEL-117510</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-3" date="1776772800">- Fix a regression in Xwayland 24.1.9 with XTS test Xlib10
  Resolves: https://redhat.atlassian.net/browse/RHEL-170368</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4" date="1776859200">- CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
               CVE-2026-34002, CVE-2026-34003
  Resolves: https://redhat.atlassian.net/browse/RHEL-163199
  Resolves: https://redhat.atlassian.net/browse/RHEL-163295
  Resolves: https://redhat.atlassian.net/browse/RHEL-163253</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4.1" date="1781092800">- CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
               CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
               CVE-2026-50262, CVE-2026-50263
  Resolves: https://redhat.atlassian.net/browse/RHEL-182426</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4.2" date="1781265600">- Other security related fixes
  Resolves: https://redhat.atlassian.net/browse/RHEL-184292</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4.3" date="1783512000">- CVE fix for: CVE-2026-55999, CVE-2026-56000
  Resolves: https://redhat.atlassian.net/browse/RHEL-191532
  Resolves: https://redhat.atlassian.net/browse/RHEL-191524</changelog>
</package>
<package pkgid="6ae6fc4bb86fceef8e111f1b04625de7d87570befd37d03acdf4fd7bc0e58cc7" name="xorg-x11-server-Xwayland-debuginfo" arch="x86_64">
  <version epoch="0" ver="24.1.9" rel="4.el9_8.3"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-3" date="1740571200">- CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187),
               CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193),
               CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202),
               CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-4" date="1750248000">- CVE fix for: CVE-2025-49175 (RHEL-97288), CVE-2025-49176 (RHEL-97334),
               CVE-2025-49177 (RHEL-97357), CVE-2025-49178 (RHEL-97393),
               CVE-2025-49179 (RHEL-97404), CVE-2025-49180 (RHEL-97244)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-5" date="1761825600">- CVE fix for: CVE-2025-62229 (RHEL-119977), CVE-2025-62230 (RHEL-120023),
               CVE-2025-62231 (RHEL-125018)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-1" date="1763640000">- Rebase to Xwayland 24.1.9 (RHEL-129828)</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 24.1.9-2" date="1768305600">- Rebuild against xorg-x11-xtrans-devel 1.4.0-9
  Resolves: RHEL-117510</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-3" date="1776772800">- Fix a regression in Xwayland 24.1.9 with XTS test Xlib10
  Resolves: https://redhat.atlassian.net/browse/RHEL-170368</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4" date="1776859200">- CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
               CVE-2026-34002, CVE-2026-34003
  Resolves: https://redhat.atlassian.net/browse/RHEL-163199
  Resolves: https://redhat.atlassian.net/browse/RHEL-163295
  Resolves: https://redhat.atlassian.net/browse/RHEL-163253</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4.1" date="1781092800">- CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
               CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
               CVE-2026-50262, CVE-2026-50263
  Resolves: https://redhat.atlassian.net/browse/RHEL-182426</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4.2" date="1781265600">- Other security related fixes
  Resolves: https://redhat.atlassian.net/browse/RHEL-184292</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4.3" date="1783512000">- CVE fix for: CVE-2026-55999, CVE-2026-56000
  Resolves: https://redhat.atlassian.net/browse/RHEL-191532
  Resolves: https://redhat.atlassian.net/browse/RHEL-191524</changelog>
</package>
<package pkgid="21ce8c7c1186780bb6161a3e37f7baef26f218e444182aec781c42e5e5de2be8" name="xorg-x11-server-Xwayland-debugsource" arch="i686">
  <version epoch="0" ver="24.1.9" rel="4.el9_8.2"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-2" date="1730289600">- Fix for CVE-2024-9632 - (RHEL-61997)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-3" date="1740571200">- CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187),
               CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193),
               CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202),
               CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-4" date="1750248000">- CVE fix for: CVE-2025-49175 (RHEL-97288), CVE-2025-49176 (RHEL-97334),
               CVE-2025-49177 (RHEL-97357), CVE-2025-49178 (RHEL-97393),
               CVE-2025-49179 (RHEL-97404), CVE-2025-49180 (RHEL-97244)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-5" date="1761825600">- CVE fix for: CVE-2025-62229 (RHEL-119977), CVE-2025-62230 (RHEL-120023),
               CVE-2025-62231 (RHEL-125018)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-1" date="1763640000">- Rebase to Xwayland 24.1.9 (RHEL-129828)</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 24.1.9-2" date="1768305600">- Rebuild against xorg-x11-xtrans-devel 1.4.0-9
  Resolves: RHEL-117510</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-3" date="1776772800">- Fix a regression in Xwayland 24.1.9 with XTS test Xlib10
  Resolves: https://redhat.atlassian.net/browse/RHEL-170368</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4" date="1776859200">- CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
               CVE-2026-34002, CVE-2026-34003
  Resolves: https://redhat.atlassian.net/browse/RHEL-163199
  Resolves: https://redhat.atlassian.net/browse/RHEL-163295
  Resolves: https://redhat.atlassian.net/browse/RHEL-163253</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4.1" date="1781092800">- CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
               CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
               CVE-2026-50262, CVE-2026-50263
  Resolves: https://redhat.atlassian.net/browse/RHEL-182426</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4.2" date="1781265600">- Other security related fixes
  Resolves: https://redhat.atlassian.net/browse/RHEL-184292</changelog>
</package>
<package pkgid="5cc678c92841ff5643f44b48bb0add5b481c9ca84457cfce018efb6299055219" name="xorg-x11-server-Xwayland-debugsource" arch="x86_64">
  <version epoch="0" ver="24.1.9" rel="4.el9_8.2"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-2" date="1730289600">- Fix for CVE-2024-9632 - (RHEL-61997)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-3" date="1740571200">- CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187),
               CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193),
               CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202),
               CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-4" date="1750248000">- CVE fix for: CVE-2025-49175 (RHEL-97288), CVE-2025-49176 (RHEL-97334),
               CVE-2025-49177 (RHEL-97357), CVE-2025-49178 (RHEL-97393),
               CVE-2025-49179 (RHEL-97404), CVE-2025-49180 (RHEL-97244)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-5" date="1761825600">- CVE fix for: CVE-2025-62229 (RHEL-119977), CVE-2025-62230 (RHEL-120023),
               CVE-2025-62231 (RHEL-125018)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-1" date="1763640000">- Rebase to Xwayland 24.1.9 (RHEL-129828)</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 24.1.9-2" date="1768305600">- Rebuild against xorg-x11-xtrans-devel 1.4.0-9
  Resolves: RHEL-117510</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-3" date="1776772800">- Fix a regression in Xwayland 24.1.9 with XTS test Xlib10
  Resolves: https://redhat.atlassian.net/browse/RHEL-170368</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4" date="1776859200">- CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
               CVE-2026-34002, CVE-2026-34003
  Resolves: https://redhat.atlassian.net/browse/RHEL-163199
  Resolves: https://redhat.atlassian.net/browse/RHEL-163295
  Resolves: https://redhat.atlassian.net/browse/RHEL-163253</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4.1" date="1781092800">- CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
               CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
               CVE-2026-50262, CVE-2026-50263
  Resolves: https://redhat.atlassian.net/browse/RHEL-182426</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4.2" date="1781265600">- Other security related fixes
  Resolves: https://redhat.atlassian.net/browse/RHEL-184292</changelog>
</package>
<package pkgid="f8a6517e10fc04a793a40a267ce7878f9dd6e9e7cdd169f3150af1775a9bca5f" name="xorg-x11-server-Xwayland-debugsource" arch="i686">
  <version epoch="0" ver="24.1.9" rel="4.el9_8.3"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-3" date="1740571200">- CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187),
               CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193),
               CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202),
               CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-4" date="1750248000">- CVE fix for: CVE-2025-49175 (RHEL-97288), CVE-2025-49176 (RHEL-97334),
               CVE-2025-49177 (RHEL-97357), CVE-2025-49178 (RHEL-97393),
               CVE-2025-49179 (RHEL-97404), CVE-2025-49180 (RHEL-97244)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-5" date="1761825600">- CVE fix for: CVE-2025-62229 (RHEL-119977), CVE-2025-62230 (RHEL-120023),
               CVE-2025-62231 (RHEL-125018)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-1" date="1763640000">- Rebase to Xwayland 24.1.9 (RHEL-129828)</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 24.1.9-2" date="1768305600">- Rebuild against xorg-x11-xtrans-devel 1.4.0-9
  Resolves: RHEL-117510</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-3" date="1776772800">- Fix a regression in Xwayland 24.1.9 with XTS test Xlib10
  Resolves: https://redhat.atlassian.net/browse/RHEL-170368</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4" date="1776859200">- CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
               CVE-2026-34002, CVE-2026-34003
  Resolves: https://redhat.atlassian.net/browse/RHEL-163199
  Resolves: https://redhat.atlassian.net/browse/RHEL-163295
  Resolves: https://redhat.atlassian.net/browse/RHEL-163253</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4.1" date="1781092800">- CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
               CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
               CVE-2026-50262, CVE-2026-50263
  Resolves: https://redhat.atlassian.net/browse/RHEL-182426</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4.2" date="1781265600">- Other security related fixes
  Resolves: https://redhat.atlassian.net/browse/RHEL-184292</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4.3" date="1783512000">- CVE fix for: CVE-2026-55999, CVE-2026-56000
  Resolves: https://redhat.atlassian.net/browse/RHEL-191532
  Resolves: https://redhat.atlassian.net/browse/RHEL-191524</changelog>
</package>
<package pkgid="570d54f6d851b311831f47559b0b48fba75ee216800907419c95155139e6ff6d" name="xorg-x11-server-Xwayland-debugsource" arch="x86_64">
  <version epoch="0" ver="24.1.9" rel="4.el9_8.3"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-3" date="1740571200">- CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187),
               CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193),
               CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202),
               CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-4" date="1750248000">- CVE fix for: CVE-2025-49175 (RHEL-97288), CVE-2025-49176 (RHEL-97334),
               CVE-2025-49177 (RHEL-97357), CVE-2025-49178 (RHEL-97393),
               CVE-2025-49179 (RHEL-97404), CVE-2025-49180 (RHEL-97244)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 23.2.7-5" date="1761825600">- CVE fix for: CVE-2025-62229 (RHEL-119977), CVE-2025-62230 (RHEL-120023),
               CVE-2025-62231 (RHEL-125018)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-1" date="1763640000">- Rebase to Xwayland 24.1.9 (RHEL-129828)</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 24.1.9-2" date="1768305600">- Rebuild against xorg-x11-xtrans-devel 1.4.0-9
  Resolves: RHEL-117510</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-3" date="1776772800">- Fix a regression in Xwayland 24.1.9 with XTS test Xlib10
  Resolves: https://redhat.atlassian.net/browse/RHEL-170368</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4" date="1776859200">- CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
               CVE-2026-34002, CVE-2026-34003
  Resolves: https://redhat.atlassian.net/browse/RHEL-163199
  Resolves: https://redhat.atlassian.net/browse/RHEL-163295
  Resolves: https://redhat.atlassian.net/browse/RHEL-163253</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4.1" date="1781092800">- CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
               CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
               CVE-2026-50262, CVE-2026-50263
  Resolves: https://redhat.atlassian.net/browse/RHEL-182426</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4.2" date="1781265600">- Other security related fixes
  Resolves: https://redhat.atlassian.net/browse/RHEL-184292</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 24.1.9-4.3" date="1783512000">- CVE fix for: CVE-2026-55999, CVE-2026-56000
  Resolves: https://redhat.atlassian.net/browse/RHEL-191532
  Resolves: https://redhat.atlassian.net/browse/RHEL-191524</changelog>
</package>
<package pkgid="57a4ebdc1f1f28cc0c08310a1a2ef76cdd566a36b03f73e5a554185f3049d422" name="xorg-x11-server-debugsource" arch="i686">
  <version epoch="0" ver="1.20.11" rel="34.el9_8.2"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.11-27" date="1730203200">- CVE fix for CVE-2024-9632
- Backport fix for invalid Unicode sequence</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-28" date="1740571200">- CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186),
               CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191),
               CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199),
               CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-29" date="1742558400">- Fix LEDs state after suspend/resume
  Resolves: https://issues.redhat.com/browse/RHEL-82085</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-30" date="1745323200">- xfree86: Fix potentially NULL reference to platform device's PCI device
  Resolves: https://issues.redhat.com/browse/RHEL-84253</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-31" date="1750248000">- CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308),
               CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409),
               CVE-2025-49180 (RHEL-97253)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-32" date="1761825600">- CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035),
               CVE-2025-62231 (RHEL-125003)</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-33" date="1768392000">- Rebuild against xorg-x11-xtrans-devel 1.4.0-9
  Resolves: RHEL-117509</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34" date="1776168000">- CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
               CVE-2026-34002, CVE-2026-34003
  Resolves: https://redhat.atlassian.net/browse/RHEL-163226
  Resolves: https://redhat.atlassian.net/browse/RHEL-163308
  Resolves: https://redhat.atlassian.net/browse/RHEL-163239</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.1" date="1781092800">- CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
               CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
               CVE-2026-50262, CVE-2026-50263, CVE-2026-50264
  Resolves: https://redhat.atlassian.net/browse/RHEL-182435</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.2" date="1781265600">- Other security related fixes
  Resolves: https://redhat.atlassian.net/browse/RHEL-184288</changelog>
</package>
<package pkgid="d1007564557195c785d3539eaafe6a755f0ae639885267d42e9d059aed3d7c59" name="xorg-x11-server-debugsource" arch="x86_64">
  <version epoch="0" ver="1.20.11" rel="34.el9_8.2"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.11-27" date="1730203200">- CVE fix for CVE-2024-9632
- Backport fix for invalid Unicode sequence</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-28" date="1740571200">- CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186),
               CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191),
               CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199),
               CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-29" date="1742558400">- Fix LEDs state after suspend/resume
  Resolves: https://issues.redhat.com/browse/RHEL-82085</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-30" date="1745323200">- xfree86: Fix potentially NULL reference to platform device's PCI device
  Resolves: https://issues.redhat.com/browse/RHEL-84253</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-31" date="1750248000">- CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308),
               CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409),
               CVE-2025-49180 (RHEL-97253)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-32" date="1761825600">- CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035),
               CVE-2025-62231 (RHEL-125003)</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-33" date="1768392000">- Rebuild against xorg-x11-xtrans-devel 1.4.0-9
  Resolves: RHEL-117509</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34" date="1776168000">- CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
               CVE-2026-34002, CVE-2026-34003
  Resolves: https://redhat.atlassian.net/browse/RHEL-163226
  Resolves: https://redhat.atlassian.net/browse/RHEL-163308
  Resolves: https://redhat.atlassian.net/browse/RHEL-163239</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.1" date="1781092800">- CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
               CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
               CVE-2026-50262, CVE-2026-50263, CVE-2026-50264
  Resolves: https://redhat.atlassian.net/browse/RHEL-182435</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.2" date="1781265600">- Other security related fixes
  Resolves: https://redhat.atlassian.net/browse/RHEL-184288</changelog>
</package>
<package pkgid="aa3d130162e89cb06af39e33a801422d449b0afc677cd7b6dab31e6f142ccf11" name="xorg-x11-server-debugsource" arch="i686">
  <version epoch="0" ver="1.20.11" rel="34.el9_8.3"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-28" date="1740571200">- CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186),
               CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191),
               CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199),
               CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-29" date="1742558400">- Fix LEDs state after suspend/resume
  Resolves: https://issues.redhat.com/browse/RHEL-82085</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-30" date="1745323200">- xfree86: Fix potentially NULL reference to platform device's PCI device
  Resolves: https://issues.redhat.com/browse/RHEL-84253</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-31" date="1750248000">- CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308),
               CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409),
               CVE-2025-49180 (RHEL-97253)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-32" date="1761825600">- CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035),
               CVE-2025-62231 (RHEL-125003)</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-33" date="1768392000">- Rebuild against xorg-x11-xtrans-devel 1.4.0-9
  Resolves: RHEL-117509</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34" date="1776168000">- CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
               CVE-2026-34002, CVE-2026-34003
  Resolves: https://redhat.atlassian.net/browse/RHEL-163226
  Resolves: https://redhat.atlassian.net/browse/RHEL-163308
  Resolves: https://redhat.atlassian.net/browse/RHEL-163239</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.1" date="1781092800">- CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
               CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
               CVE-2026-50262, CVE-2026-50263, CVE-2026-50264
  Resolves: https://redhat.atlassian.net/browse/RHEL-182435</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.2" date="1781265600">- Other security related fixes
  Resolves: https://redhat.atlassian.net/browse/RHEL-184288</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-34.3" date="1783684800">- CVE fix for CVE-2026-55999
  Resolves: https://redhat.atlassian.net/browse/RHEL-191493</changelog>
</package>
<package pkgid="caa4a794c414fcb3930fbd5696a273586b99d8d01147c5ed60f90ed1741eeb36" name="xorg-x11-server-debugsource" arch="x86_64">
  <version epoch="0" ver="1.20.11" rel="34.el9_8.3"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-28" date="1740571200">- CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186),
               CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191),
               CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199),
               CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-29" date="1742558400">- Fix LEDs state after suspend/resume
  Resolves: https://issues.redhat.com/browse/RHEL-82085</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-30" date="1745323200">- xfree86: Fix potentially NULL reference to platform device's PCI device
  Resolves: https://issues.redhat.com/browse/RHEL-84253</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-31" date="1750248000">- CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308),
               CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409),
               CVE-2025-49180 (RHEL-97253)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-32" date="1761825600">- CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035),
               CVE-2025-62231 (RHEL-125003)</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-33" date="1768392000">- Rebuild against xorg-x11-xtrans-devel 1.4.0-9
  Resolves: RHEL-117509</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34" date="1776168000">- CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001
               CVE-2026-34002, CVE-2026-34003
  Resolves: https://redhat.atlassian.net/browse/RHEL-163226
  Resolves: https://redhat.atlassian.net/browse/RHEL-163308
  Resolves: https://redhat.atlassian.net/browse/RHEL-163239</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.1" date="1781092800">- CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258,
               CVE-2026-50259, CVE-2026-50260, CVE-2026-50261,
               CVE-2026-50262, CVE-2026-50263, CVE-2026-50264
  Resolves: https://redhat.atlassian.net/browse/RHEL-182435</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.11-34.2" date="1781265600">- Other security related fixes
  Resolves: https://redhat.atlassian.net/browse/RHEL-184288</changelog>
  <changelog author="Michel D&#xE4;nzer  &lt;mdaenzer@redhat.com&gt; - 1.20.11-34.3" date="1783684800">- CVE fix for CVE-2026-55999
  Resolves: https://redhat.atlassian.net/browse/RHEL-191493</changelog>
</package>
<package pkgid="5c81e937a1ad343a03ef4af2b73343e6ece4621073a198d83b4bae9e78e224ed" name="yelp-debuginfo" arch="x86_64">
  <version epoch="2" ver="40.3" rel="3.el9_8.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2:40.3-3" date="1745409600">- Fix CVE-2025-3155 (RHEL-85927)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2:40.3-3.1" date="1783425600">- Fix CVE-2026-13601 (RHEL-190224)</changelog>
</package>
<package pkgid="30fb44320e3f56f9954b0bfca97bc5f93184f80d5d3f4dd9c88663a1a2e7ab45" name="yelp-debugsource" arch="i686">
  <version epoch="2" ver="40.3" rel="3.el9_8.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2:40.3-3" date="1745409600">- Fix CVE-2025-3155 (RHEL-85927)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2:40.3-3.1" date="1783425600">- Fix CVE-2026-13601 (RHEL-190224)</changelog>
</package>
<package pkgid="05a2ba95d85b3d67e8615ddf49990817ac37458d488ce355d0aeeafbf60844a7" name="yelp-debugsource" arch="x86_64">
  <version epoch="2" ver="40.3" rel="3.el9_8.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2:40.3-3" date="1745409600">- Fix CVE-2025-3155 (RHEL-85927)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2:40.3-3.1" date="1783425600">- Fix CVE-2026-13601 (RHEL-190224)</changelog>
</package>
<package pkgid="5165b1cfc4e3abdb76e3f65e2ecbdbf7f35a6aef7e669a05435563708e3785ba" name="yelp-libs-debuginfo" arch="i686">
  <version epoch="2" ver="40.3" rel="3.el9_8.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2:40.3-3" date="1745409600">- Fix CVE-2025-3155 (RHEL-85927)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2:40.3-3.1" date="1783425600">- Fix CVE-2026-13601 (RHEL-190224)</changelog>
</package>
<package pkgid="4a703ef9e8c096456d97f8ae768fa3419840d5b5ee48f2939bb2223536571fcd" name="yelp-libs-debuginfo" arch="x86_64">
  <version epoch="2" ver="40.3" rel="3.el9_8.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2:40.3-3" date="1745409600">- Fix CVE-2025-3155 (RHEL-85927)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2:40.3-3.1" date="1783425600">- Fix CVE-2026-13601 (RHEL-190224)</changelog>
</package>
</otherdata>